Isaca CISM Exam - Topic 4 Question 10 Discussion

Actual exam question for Isaca's CISM exam

Question #: 10
Topic #: 4

[All CISM Questions]

Which of the following is MOST important for an information security manager to present to senior management on a regular basis?

ADetails of reported vulnerabilities

BChanges to the organization's threat environment

CFalse positives found on the intrusion prevention system

DSecurity controls in place to prevent the threats

Show Suggested Answer

Suggested Answer: B

by Francine at May 09, 2022, 01:26 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Val

5 months ago

I’m surprised B isn’t the obvious choice for everyone!

upvoted 0 times

...

Elsa

6 months ago

Wait, are we really prioritizing D over the actual threats?

upvoted 0 times

...

Doyle

6 months ago

C seems less important, false positives happen all the time.

upvoted 0 times

...

Alberto

6 months ago

I think A is crucial too, gotta know the vulnerabilities!

upvoted 0 times

...

Marylin

6 months ago

Definitely B, the threat environment is always changing.

upvoted 0 times

...

Mariann

6 months ago

I recall a practice question that emphasized the importance of understanding the threat landscape, so I lean towards B as the best answer here.

upvoted 0 times

...

Azzie

6 months ago

I feel like D could be important too, but I wonder if management really needs to know about security controls as much as they need to know about the threats.

upvoted 0 times

...

Rachael

6 months ago

I'm not entirely sure, but I remember practicing a question where vulnerabilities were highlighted as important too. Maybe A is also a contender?

upvoted 0 times

...

Meaghan

6 months ago

I think it might be B, changes to the organization's threat environment. That seems crucial for management to understand the current risks.

upvoted 0 times

...

Vivienne

6 months ago

I'm pretty confident I know the answer to this one. The function that helps connect to a dynamic Oracle RAC installation is the Single Client Access Name (SCAN).

upvoted 0 times

...

Ardella

6 months ago

Hmm, I'm a bit unsure about the relationship between the Parent Company and the Balance Sheet. I'll need to review my notes to make sure I understand that part.

upvoted 0 times

...

Vincent

6 months ago

Ah, I see what they're getting at. The key is to use the appropriate stream method to generate the range of numbers from l to 100. I think I've got this one figured out.

upvoted 0 times

...