Free Isaca CISM Exam Questions

Become Isaca Certified with updated CISM exam questions and correct answers

Page: 1 / 185

Total 921 Questions | Updated On: Jan 07, 2025

Add To Cart

Question 1

An organization's outsourced firewall was poorly configured and allowed unauthorized access that resulted in downtime of 48 hours. Which of the following should be the information security manager's NEXT course of action?

A : configure the firewall in accordance with best practices.

B : tain supporting evidence that the problem has been corrected.

C : ek damages from the service provider.

D : visit the contract and improve accountability of the service provider.

Answer: B

Question 2

Which of the following is MOST critical to ensure that information security incidents are managed properly?

A : nducting an incident capability maturity assessment

B : ting the incident response plan

C : tablishing an incident management performance matrix

D : embling the incident response team

Answer: B

Question 3

An organization recently updated and published its information security policy and standards. What should the information security manager do NEXT?

A : date the organization's risk register.

B : velop a policy exception process.

C : mmunicate the changes to stakeholders.

D : nduct a risk assessment.

Answer: C

Question 4

The MOST important objective of security awareness training for business staff is to:

A : derstand intrusion methods.

B : duce negative audit findings.

C : crease compliance.

D : dify behavior.

Answer: D

Question 5

Which of the following is the MOST important consideration when defining an information security framework?

A : formation security budget

B : dustry standards

C : iness strategy

D : ganizational culture

Answer: D

Page: 1 / 185

Total 921 Questions | Updated On: Jan 07, 2025

Add To Cart