IsacaIsaca
CISM · Question #204
CISM Question #204: Real Exam Question with Answer & Explanation
Sign in or unlock CISM to reveal the answer and full explanation for question #204. The question stem and answer options stay visible for context.
Submitted by hassan_iq· Apr 18, 2026Information Security Risk Management
Question
A penetration test was conducted by an accredited third party. Which of the following should be the information security manager's FIRST course of action?
Options
- AProduce a business case to resolve identified issues.
- BEnsure a risk assessment is performed to evaluate the findings.
- CUpdate intrusion prevention system (IPS) settings.
- DEnsure vulnerabilities found are resolved within acceptable timeframes.
Unlock CISM to see the answer
You've previewed enough free CISM questions. Unlock CISM for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Penetration Testing#Risk Assessment#Vulnerability Management#Security Management