Free Isaca CISM Exam Questions

Become Isaca Certified with updated CISM exam questions and correct answers

Page: 1 / 195

Total 975 Questions | Updated On: Dec 18, 2025

Add To Cart

Question 1

While responding to a high-profile security incident, an information security manager observed several deficiencies in the current incident response plan. When would be the BEST time to update the plan?

A : While responding to the incident

B : During a tabletop exercise

C : During post-incident review

D : After a risk reassessment

Answer: C

Question 2

What type of control is being implemented when a security information and event management (SIEM) system is installed?

A : Preventive

B : Deterrent

C : Detective

D : Corrective

Answer: C

Question 3

A new information security manager finds that the organization tends to use short-term solutions to address problems. Resource allocation and spending are not effectively tracked, and there is no assurance that compliance requirements are being met. What should be done FIRST to reverse this bottom-up approach to security?

A : Conduct a threat analysis.

B : Implement an information security awareness training program.

C : Establish an audit committee.

D : Create an information security steering committee.

Answer: D

Question 4

Which of the following is the MOST important consideration when developing incident classification methods?

A : ta classification

B : ta owner input

C : rvice level agreements (SLAs)

D : iness impact

Answer: D

Question 5

Which of the following is the GREATEST challenge with assessing emerging risk in an organization?

A : Lack of a risk framework

B : Ineffective security controls

C : Presence of known vulnerabilities

D : Incomplete identification of threats

Answer: D

Page: 1 / 195

Total 975 Questions | Updated On: Dec 18, 2025

Add To Cart