IsacaIsaca
CISM · Question #548
CISM Question #548: Real Exam Question with Answer & Explanation
Sign in or unlock CISM to reveal the answer and full explanation for question #548. The question stem and answer options stay visible for context.
Submitted by jaden.t· Apr 18, 2026Information Security Incident Management
Question
A successful breach of an organization's web application platform was detected and logged in a SIEM platform, but the security team was unaware of the event due to a large number of alerts and the event occurred during the weekend. Which of the following is the BEST way to improve response to this type of event?
Options
- AImplement an intrusion detection and prevention solution.
- BConfigure the SIEM to ingest all available logs.
- CAdd more security staff to review firewall and SIEM events.
- DEstablish a 24/7 automated detection and notification process.
Unlock CISM to see the answer
You've previewed enough free CISM questions. Unlock CISM for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Incident Response#Security Operations#SIEM Optimization#Automated Alerting