Free Isaca CISM Exam Questions

Become Isaca Certified with updated CISM exam questions and correct answers

Page: 1 / 185

Total 921 Questions | Updated On: Jun 05, 2025

Add To Cart

Question 1

Which of the following should be given the HIGHEST priority during an information security post-incident review?

A : aluating incident response effectiveness

B : cumenting actions taken in sufficient detail

C : aluating the performance of incident response team members

D : dating key risk indicators (KRIs)

Answer: A

Question 2

Which of the following BEST indicates an effective vulnerability management program?

A : curity incidents are reported in a timely manner.

B : reats are identified accurately.

C : ntrols are managed proactively.

D : ks are managed within acceptable limits.

Answer: D

Question 3

Which of the following is the GREATEST benefit of information asset classification?

A : pporting segregation of duties

B : fining resource ownership

C : oviding a basis for implementing a need-to-know policy

D : lping to determine the recovery point objective (RPO)

Answer: C

Question 4

Which of the following is the BEST tool to monitor the effectiveness of information security governance?

A : lanced scorecard

B : k profile

C : iness impact analysis (BIA)

D : y performance indicators (KPIs)

Answer: A

Question 5

An information security manager has been asked to provide regular status reports to senior management regarding the information security program. Which of the following would provide the MOST helpful information?

A : list detailing the latest threats

B : mber of phishing incidents per month

C : mediation activities performed

D : y performance indicators (KPIs)

Answer: D

Page: 1 / 185

Total 921 Questions | Updated On: Jun 05, 2025

Add To Cart