Free Isaca CISM Exam Questions

Become Isaca Certified with updated CISM exam questions and correct answers

Page: 1 / 185

Total 921 Questions | Updated On: Feb 20, 2025

Add To Cart

Question 1

An attacker was able to gain access to an organization's perimeter firewall and made changes to allow wider external access and to steal data. Which of the following would have BEST provided timely identification of this incident?

A : plementing a data loss prevention (DLP) suite

B : ploying an intrusion prevention system (IPS)

C : ploying a security information and event management system (SIEM)

D : nducting regular system administrator awareness training

Answer: C

Question 2

Which type of control is an incident response team?

A : tective

B : rective

C : rrective

D : eventive

Answer: C

Question 3

The PRIMARY objective of performing a post-incident review is to:

A : entify control improvements

B : entify vulnerabilities

C : -evaluate the impact of incidents

D : entify the root cause

Answer: A

Question 4

A CISO learns that a third-party service provider did not notify the organization of a data breach that affected the service provider's data center. Which of the following should the CISO do FIRST?

A : termine the extent of the impact to the organization.

B : quest an independent review of the provider's data center.

C : tify affected customers of the data breach.

D : commend canceling the outsourcing contract.

Answer: A

Question 5

Which of the following is the MOST important consideration when determining which type of failover site to employ?

A : aster recovery test results

B : ciprocal agreements

C : covery time objectives (RTOs)

D : ta retention requirements

Answer: C

Page: 1 / 185

Total 921 Questions | Updated On: Feb 20, 2025

Add To Cart