Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
CISM Information Security Program Practice Question
Arrange the steps for performing a vulnerability scan on a network segment.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Obtain authorization, configure scan parameters, execute scan, analyze results, prioritize findings
Vulnerability scanning requires authorization, configuration, execution, analysis, and prioritization.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Obtain authorization, configure scan parameters, execute scan, analyze results, prioritize findings
Why this is correct
This order is correct because authorization must be secured before any scanning activity, configuration defines the scope and settings, execution runs the scan, analysis examines the output, and prioritization determines remediation order.
- ✗
Configure scan parameters, obtain authorization, execute scan, analyze results, prioritize findings
Why it's wrong here
This order is incorrect because configuring scan parameters before obtaining authorization may lead to unauthorized scanning or wasted effort if authorization is denied.
- ✗
Obtain authorization, execute scan, configure scan parameters, analyze results, prioritize findings
Why it's wrong here
This order is incorrect because executing the scan before configuring parameters would use default or inappropriate settings, potentially missing targets or causing network issues.
- ✗
Obtain authorization, configure scan parameters, analyze results, execute scan, prioritize findings
Why it's wrong here
This order is incorrect because analyzing results before executing the scan is impossible; results must be obtained from the scan execution first.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISM question from scratch — 871 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISM exam.