IsacaIsaca
CISM · Question #796
CISM Question #796: Real Exam Question with Answer & Explanation
Sign in or unlock CISM to reveal the answer and full explanation for question #796. The question stem and answer options stay visible for context.
Submitted by packet_pusher· Apr 18, 2026Information Security Risk Management
Question
An information security team has started work to mitigate findings from a recent penetration test. Which of the following presents the GREATEST risk to the organization?
Options
- ASome findings were reclassified to low risk after evaluation
- BNot all findings from the penetration test report were fixed
- CThe penetration testing report did not contain any high-risk findings
- DRisk classification of penetration test findings was not performed
Unlock CISM to see the answer
You've previewed enough free CISM questions. Unlock CISM for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Risk Management#Penetration Testing Remediation#Vulnerability Management#Risk Classification