Free Isaca CISM Exam Questions

Become Isaca Certified with updated CISM exam questions and correct answers

Page: 1 / 195

Total 975 Questions | Updated On: Oct 28, 2025

Add To Cart

Question 1

A recent audit found that an organization's new user accounts are not set up uniformly. Which of the following is MOST important for the information security manager to review?

A : Automated controls

B : Security policies

C : Guidelines

D : Standards

Answer: D

Question 2

Which of the following would BEST demonstrate the status of an organization's information security program to the board of directors?

A : Information security program metrics

B : Results of a recent external audit

C : The information security operations matrix

D : Changes to information security risks

Answer: A

Question 3

An information security program is BEST positioned for success when it is closely aligned with:

A : information security best practices.

B : recognized industry frameworks.

C : information security policies.

D : the information security strategy.

Answer: D

Question 4

Which of the following is the GREATEST challenge with assessing emerging risk in an organization?

A : Lack of a risk framework

B : Ineffective security controls

C : Presence of known vulnerabilities

D : Incomplete identification of threats

Answer: D

Question 5

Which of the following BEST indicates an effective vulnerability management program?

A : curity incidents are reported in a timely manner.

B : reats are identified accurately.

C : ntrols are managed proactively.

D : ks are managed within acceptable limits.

Answer: D

Page: 1 / 195

Total 975 Questions | Updated On: Oct 28, 2025

Add To Cart