Free CISM Exam Questions - Easiest Way for Success

Prepare for the Isaca CISM exam questions with our authentic preparation materials, including free CISM practice exam questions and answers. TheExamsLab provides all the support you need to succeed in the Certified Information Security Manager CISM exam. This dedication to student success is why we have the most satisfied CISM certification exam candidates worldwide.

Page: 1 / 185

Total 921 Questions | Updated On: Sep 14, 2024

Add To Cart

Question 1

Senior management is concerned that the incident response team took unapproved actions during incident response that put business objectives at risk. Which of the following is the BEST way for the information security manager to respond to this situation?

A : Update roles and responsibilities of the incident response team.

B : Train the incident response team on escalation procedures.

C : Implement a monitoring solution for incident response activities.

D : Validate that the information security strategy maps to corporate objectives.

Answer: A

Question 2

Which of the following MOST effectively allows for disaster recovery testing without interrupting business operations?

A : Structured walk-through

B : Simulation testing

C : Parallel testing

D : Full interruption testing

Answer: C

Question 3

An organization is planning to outsource the execution of its disaster recovery activities. Which of the following would be MOST important to include in the outsourcing agreement?

A : Requirements for regularly testing backups

B : The disaster recovery communication plan

C : Recovery time objectives (RTOs)

D : Definition of when a disaster should be declared

Answer: C

Question 4

An information security manager has been asked to determine whether an information security initiative has reduced risk to an acceptable level. Which of the following activities would provide the BEST information for the information security manager to draw a conclusion?

A : Initiating a cost-benefit analysis of the implemented controls

B : Performing a risk assessment

C : Reviewing the risk register

D : Conducting a business impact analysis (BIA)

Answer: A

Question 5

When creating an incident response plan, which of the following is MOST important to include during the preparation phase of the plan’s life cycle?

A : Communication plan

B : Response procedures

C : Risk management plan

D : Forensic analysis procedures

Answer: C

Page: 1 / 185

Total 921 Questions | Updated On: Sep 14, 2024

Add To Cart