Isaca CISM Exam - Topic 4 Question 96 Discussion

Actual exam question for Isaca's CISM exam

Question #: 96
Topic #: 4

[All CISM Questions]

Which of the following should be implemented to BEST reduce the likelihood of a security breach?

AA data forensics program

BA configuration management program

CA layered security program

DAn incident response program

Show Suggested Answer

Suggested Answer: C

by Chauncey at Apr 04, 2025, 04:32 AM

Limited Time Offer

25%

Off

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carmen

7 months ago

Surprised that people overlook data forensics! It's super important.

upvoted 0 times

...

Henriette

7 months ago

Configuration management helps, but it's not the best choice here.

upvoted 0 times

...

Arlette

7 months ago

A layered security program is a must!

upvoted 0 times

...

Corinne

7 months ago

Definitely C! Multiple layers are key to preventing breaches.

upvoted 0 times

...

Afton

7 months ago

I think an incident response program is more crucial.

upvoted 0 times

...

Salome

8 months ago

I practiced a question like this, and I think layered security was the answer then too. It just makes sense to have multiple defenses.

upvoted 0 times

...

Odette

8 months ago

Configuration management sounds familiar, but I can't recall how it directly prevents breaches compared to layered security.

upvoted 0 times

...

Larae

8 months ago

I remember studying incident response programs, but I feel like they come into play after a breach happens, not before.

upvoted 0 times

...

Mariann

8 months ago

I think a layered security program might be the best choice here, but I'm not entirely sure if it covers everything.

upvoted 0 times

...

I'm a little confused on this one. I was thinking option A, a data forensics program, might be the best choice, but now I'm second-guessing myself. I'll have to review the material one more time before deciding.

upvoted 0 times

...

Lucina

9 months ago

I feel pretty good about this question. I'm going to go with C - a layered security program. That's the most comprehensive approach to reducing the risk of a breach.

upvoted 0 times

...

Von

9 months ago

Ah, this is a tricky one. I could see arguments for a few of the options, but I think the best answer is probably D - an incident response program. That's key for minimizing the impact of a breach.

upvoted 0 times

...

Rima

9 months ago

Hmm, I'm not totally sure about this one. I'm leaning towards option B, a configuration management program, but I'm not 100% confident. I'll have to think it through a bit more.

upvoted 0 times

...

Dusti

9 months ago

This one seems pretty straightforward. I'm going to go with option C - a layered security program. That's the best way to reduce the likelihood of a breach.

upvoted 0 times

...

Joni

1 year ago

Incident response? More like incident *prevention*, am I right? Let's not wait for the bad stuff to happen, let's just make sure it doesn't happen in the first place.

upvoted 0 times

...

Jacob

1 year ago

Layered security, all the way. It's like wearing a helmet, knee pads, and a cup - gotta protect all the important bits!

upvoted 0 times

Arminda

1 year ago

Exactly, you never know where a threat might come from so it's best to have multiple defenses in place.

upvoted 0 times

...

Cammy

1 year ago

I agree, it's like having a backup plan for your backup plan. Can never be too careful.

upvoted 0 times

...

Micah

1 year ago

Layered security is definitely the way to go. It's like having multiple layers of protection.

upvoted 0 times

...

Adelle

1 year ago

Data forensics? Pffft, that's for the CSI guys. I just want to keep the hackers away in the first place!

upvoted 0 times

Terry

1 year ago

D) An incident response program

upvoted 0 times

...

Jordan

1 year ago

C) A layered security program

upvoted 0 times

...

Chara

1 year ago

A) A data forensics program

upvoted 0 times

...

Margart

1 year ago

Configuration management is the boring but necessary stuff. Gotta keep everything up-to-date and secured, am I right?

upvoted 0 times

...

Joni

1 year ago

An incident response program is crucial. You've gotta be ready to put out the fire when it starts, you know?

upvoted 0 times

Lucy

1 year ago

A) A data forensics program

upvoted 0 times

...

Margurite

1 year ago

Definitely, having multiple layers of security can help prevent breaches.

upvoted 0 times

...

Barbra

1 year ago

C) A layered security program

upvoted 0 times

...

Isadora

1 year ago

Absolutely, having an incident response program in place is key.

upvoted 0 times

...

Tyra

1 year ago

D) An incident response program

upvoted 0 times

...

Jesus

1 year ago

C) A layered security program

upvoted 0 times

...

France

1 year ago

B) A configuration management program

upvoted 0 times

...

Hyun

1 year ago

A) A data forensics program

upvoted 0 times

...

Aleta

1 year ago

I think D) An incident response program is also important to quickly address any breaches.

upvoted 0 times

...

Cathern

1 year ago

I agree with Arlene, a layered security program provides multiple layers of defense.

upvoted 0 times

...

Helga

1 year ago

I think a layered security program is the way to go. It's like building a fort - you need multiple lines of defense to keep the bad guys out.

upvoted 0 times

Huey

1 year ago

I agree, a layered security program is essential for protecting against security breaches.

upvoted 0 times

...

Linsey

1 year ago

D) An incident response program

upvoted 0 times

...

Ernie

1 year ago

C) A layered security program

upvoted 0 times

...

Cherilyn

1 year ago

B) A configuration management program

upvoted 0 times

...

Frankie

1 year ago

A) A data forensics program

upvoted 0 times

...

Arlene

1 year ago

I think C) A layered security program is the best option.

upvoted 0 times

...