Updated Isaca CISM Exam Dumps & Practice Questions

Isaca CISM Exam Questions

Exam Name: Certified Information Security Manager

Exam Code: CISM

Certification Provider: Isaca

Actual Exam Duration: 120 Minutes

Number of CISM practice questions in our database: 801

$ 40

PDF VERSION

DEMO QUESTIONS

Q1: Which of the following is the BEST indication of an effective information security program?

A: Risk is treated to an acceptable level.

B: The number of security incidents reported by staff has increased.

C: Key risk indicators (KRIs) are established.

D: Policies are reviewed and approved by senior management.

Answer

Correct Answer: A

Q2: An information security manager has learned of an increasing trend in attacks that use phishing emails impersonating an organization's CEO in an attempt to commit wire transfer fraud. Which of the following is the BEST way to reduce the risk associated with this type of attack?

A: Temporarily suspend wire transfers for the organization.

B: Provide awareness training to the CEO for this type of phishing attack.

C: Provide awareness training to staff responsible for wire transfers.

D: Disable emails for staff responsible for wire transfers.

Answer

Correct Answer: C

Q3: When analyzing the emerging risk and threat landscape, an information security manager should FIRST:

A: determine the impact if threats materialize.

B: determine the sources of emerging threats.

C: review historical threats within the industry.

D: map threats to business assets.

Answer

Correct Answer: B

Q4: Which of the following is the BEST indication of an effective disaster recovery planning process?

A: Hot sites are required for any declared disaster.

B: Chain of custody is maintained throughout the disaster recovery process.

C: Post-incident reviews are conducted after each event.

D: Recovery time objectives (RTOs) are shorter than recovery point objectives (RPOs).

Answer

Correct Answer: C

[acf_quiz]

Testimonials – Real Results From Real Students

Your success is our priority. We’re proud to share authentic reviews from students who trusted us, passed their exams, and reached their goals with confidence.

This site has been a game-changer for my certification journey. The materials are current, reliable, and best of all—free! It's clear they're committed to supporting the IT community.

I passed my CompTIA Security+ exam on the first try thanks to this site. Their practice exams and study guides are top-notch. Highly recommend it to anyone serious about IT certifications.

I’ve passed three certifications using this site. Their materials are detailed and well-structured, and the fact that it’s free makes it even better.

If you're studying for any IT certification, this should be your first stop. It’s comprehensive, organized, and constantly updated.

This website helped me prepare for multiple certifications, and today I’m working in cybersecurity. Without their free resources, I wouldn’t be here.

Frequently Asked Question (FAQ's)

Have questions? You’re not alone. We’ve answered the most frequently asked questions to help you feel confident and informed every step of the way.

What is Prep2Certs?

Prep2Certsis a premium service offering a comprehensive collection of exam questions and answers for over 1400 certification exams. It is regularly updated and designed to help users pass their certification exams confidently.

My credit card is not accepted, I'm not able to purchase subscription. What should I do?

Please contact info@Prep2Certs.com and we will provide you with alternative payment options.

How can I renew my subscription?

You can by Contacting our sales team.

How long will I receive updates for the exams that I purchased?

Free updates are available for the duration of your subscription, after the subscription is expired, your access will no longer be available.

info@prep2certs.com

Isaca CISM Exam Questions

$ 40

PDF VERSION

DEMO QUESTIONS

Q1: Which of the following is the BEST indication of an effective information security program?

A: Risk is treated to an acceptable level.

B: The number of security incidents reported by staff has increased.

C: Key risk indicators (KRIs) are established.

D: Policies are reviewed and approved by senior management.

Q2: An information security manager has learned of an increasing trend in attacks that use phishing emails impersonating an organization's CEO in an attempt to commit wire transfer fraud. Which of the following is the BEST way to reduce the risk associated with this type of attack?

A: Temporarily suspend wire transfers for the organization.

B: Provide awareness training to the CEO for this type of phishing attack.

C: Provide awareness training to staff responsible for wire transfers.

D: Disable emails for staff responsible for wire transfers.

Q3: When analyzing the emerging risk and threat landscape, an information security manager should FIRST:

A: determine the impact if threats materialize.

B: determine the sources of emerging threats.

C: review historical threats within the industry.

D: map threats to business assets.

Q4: Which of the following is the BEST indication of an effective disaster recovery planning process?

A: Hot sites are required for any declared disaster.

B: Chain of custody is maintained throughout the disaster recovery process.

C: Post-incident reviews are conducted after each event.

D: Recovery time objectives (RTOs) are shorter than recovery point objectives (RPOs).

Testimonials – Real Results From Real Students

Frequently Asked Question (FAQ's)

Useful Links

Extra Links

info@prep2certs.com