IsacaIsaca
CISM · Question #721
CISM Question #721: Real Exam Question with Answer & Explanation
Sign in or unlock CISM to reveal the answer and full explanation for question #721. The question stem and answer options stay visible for context.
Submitted by haru.x· Apr 18, 2026Information Security Risk Management
Question
An organization is close to going live with the implementation of a cloud-based application. Independent penetration test results have been received that show a high-rated vulnerability. Which of the following would be the BEST way to proceed?
Options
- APostpone the implementation until the vulnerability has been fixed.
- BImplement the application and request the cloud service provider to fix the vulnerability.
- CCommission further penetration tests to validate initial test results.
- DAssess whether the vulnerability is within the organization's risk tolerance levels.
Unlock CISM to see the answer
You've previewed enough free CISM questions. Unlock CISM for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Risk assessment#Risk tolerance#Vulnerability management#Security decision making