Free Isaca CISM Exam Questions

Become Isaca Certified with updated CISM exam questions and correct answers

Page: 1 / 185

Total 921 Questions | Updated On: Aug 21, 2019

Add To Cart

Question 1

Which of the following is the MOST important consideration for reporting risk assessment results to senior management?

A : reports should include comparisons to industry benchmarks.

B : reports should be presented in business terms.

C : reports should use formal methodologies.

D : reports should include recommended controls.

Answer: B

Question 2

An organization is planning to outsource the execution of its disaster recovery activities. Which of the following would be MOST important to include in the outsourcing agreement?

A : quirements for regularly testing backups

B : disaster recovery communication plan

C : covery time objectives (RTOs)

D : finition of when a disaster should be declared

Answer: C

Question 3

Which of the following should an organization do FIRST when confronted with the transfer of personal data across borders?

A : fine policies and standards for data processing.

B : plement applicable privacy principles.

C : earch cyber insurance policies.

D : ess local or regional regulation.

Answer: D

Question 4

Management has announced the acquisition of a new company. The information security manager of the parent company is concerned that conflicting access rights may cause critical information to be exposed during the integration of the two companies. To BEST address this concern, the information security manager should:

A : calate concerns for conflicting access rights to management.

B : view access rights as the acquisition integration occurs.

C : plement consistent access control standards.

D : rform a risk assessment of the access rights.

Answer: C

Question 5

Which of the following is the MAIN benefit of performing an assessment of existing incident response processes?

A : lidation of current capabilities

B : nchmarking against industry peers

C : ioritization of action plans

D : entification of threats and vulnerabilities

Answer: A

Page: 1 / 185

Total 921 Questions | Updated On: Aug 21, 2019

Add To Cart