Exam overview

Isaca CISM Exam Questions

Vendor

Isaca

Exam Code

CISM

Actual Exam Duration

120 Minutes

TOTAL QUESTIONS

801

Exam Name

Certified Information Security Manager

Purchase

$ 40

One-time payment • Instant access

Exam practice

Exam Q&A

Select an option, then click Show Answer.

Q1:
Which of the following is the BEST indication of an effective information security program?

A: Risk is treated to an acceptable level.

B: The number of security incidents reported by staff has increased.

C: Key risk indicators (KRIs) are established.

D: Policies are reviewed and approved by senior management.

Answer

Correct Answer: A

Q2:
An information security manager has learned of an increasing trend in attacks that use phishing emails impersonating an organization’s CEO in an attempt to commit wire transfer fraud. Which of the following is the BEST way to reduce the risk associated with this type of attack?

A: Temporarily suspend wire transfers for the organization.

B: Provide awareness training to the CEO for this type of phishing attack.

C: Provide awareness training to staff responsible for wire transfers.

D: Disable emails for staff responsible for wire transfers.

Answer

Correct Answer: C

Q3:
When analyzing the emerging risk and threat landscape, an information security manager should FIRST:

A: determine the impact if threats materialize.

B: determine the sources of emerging threats.

C: review historical threats within the industry.

D: map threats to business assets.

Answer

Correct Answer: B

Q4:
Which of the following is the BEST indication of an effective disaster recovery planning process?

A: Hot sites are required for any declared disaster.

B: Chain of custody is maintained throughout the disaster recovery process.

C: Post-incident reviews are conducted after each event.

D: Recovery time objectives (RTOs) are shorter than recovery point objectives (RPOs).

Answer

Correct Answer: C

- Testimonials -

Real Results From Real Students

John Doe

This site has been a game-changer for my certification journey. The materials are current, reliable, and best of all—free! It's clear they're committed to supporting the IT community.

Emma

I passed my CompTIA Security+ exam on the first try thanks to this site. Their practice exams and study guides are top-notch. Highly recommend it to anyone serious about IT certifications.

Liam

I’ve passed three certifications using this site. Their materials are detailed and well-structured, and the fact that it’s free makes it even better.

Isabella

If you're studying for any IT certification, this should be your first stop. It’s comprehensive, organized, and constantly updated.

Benjamin

This website helped me prepare for multiple certifications, and today I’m working in cybersecurity. Without their free resources, I wouldn’t be here.

Frequently Asked Question (FAQ's)

Have questions? You’re not alone. We’ve answered the most frequently asked questions to help you feel confident and informed every step of the way.

What is Dumps Masters?

DumpMasters a premium service offering a comprehensive collection of exam questions and answers for over 1400 certification exams. It is regularly updated and designed to help users pass their certification exams confidently.

My credit card is not accepted, I'm not able to purchase subscription. What should I do?

Please contact info@expertdumps.com and we will provide you with alternative payment options.

How can I renew my subscription?

You can by Contacting our sales team.

How long will I receive updates for the exams that I purchased?

Free updates are available for the duration of your subscription, after the subscription is expired, your access will no longer be available.

info@expertdumps.com

Exam overview

Isaca CISM Exam Questions

Purchase

$ 40

One-time payment • Instant access

Exam practice

Exam Q&A

Q1:
Which of the following is the BEST indication of an effective information security program?

A: Risk is treated to an acceptable level.

B: The number of security incidents reported by staff has increased.

C: Key risk indicators (KRIs) are established.

D: Policies are reviewed and approved by senior management.

Q2:
An information security manager has learned of an increasing trend in attacks that use phishing emails impersonating an organization’s CEO in an attempt to commit wire transfer fraud. Which of the following is the BEST way to reduce the risk associated with this type of attack?

A: Temporarily suspend wire transfers for the organization.

B: Provide awareness training to the CEO for this type of phishing attack.

C: Provide awareness training to staff responsible for wire transfers.

D: Disable emails for staff responsible for wire transfers.

Q3:
When analyzing the emerging risk and threat landscape, an information security manager should FIRST:

A: determine the impact if threats materialize.

B: determine the sources of emerging threats.

C: review historical threats within the industry.

D: map threats to business assets.

Q4:
Which of the following is the BEST indication of an effective disaster recovery planning process?

A: Hot sites are required for any declared disaster.

B: Chain of custody is maintained throughout the disaster recovery process.

C: Post-incident reviews are conducted after each event.

D: Recovery time objectives (RTOs) are shorter than recovery point objectives (RPOs).

- Testimonials -

Real Results From Real Students

Frequently Asked Question (FAQ's)

Useful Links

Extra Links

Exam overview

Isaca CISM Exam Questions

Purchase

$ 40

One-time payment • Instant access

Exam practice

Exam Q&A

Q1: Which of the following is the BEST indication of an effective information security program?

A: Risk is treated to an acceptable level.

B: The number of security incidents reported by staff has increased.

C: Key risk indicators (KRIs) are established.

D: Policies are reviewed and approved by senior management.

Q2: An information security manager has learned of an increasing trend in attacks that use phishing emails impersonating an organization’s CEO in an attempt to commit wire transfer fraud. Which of the following is the BEST way to reduce the risk associated with this type of attack?

A: Temporarily suspend wire transfers for the organization.

B: Provide awareness training to the CEO for this type of phishing attack.

C: Provide awareness training to staff responsible for wire transfers.

D: Disable emails for staff responsible for wire transfers.

Q3: When analyzing the emerging risk and threat landscape, an information security manager should FIRST:

A: determine the impact if threats materialize.

B: determine the sources of emerging threats.

C: review historical threats within the industry.

D: map threats to business assets.

Q4: Which of the following is the BEST indication of an effective disaster recovery planning process?

A: Hot sites are required for any declared disaster.

B: Chain of custody is maintained throughout the disaster recovery process.

C: Post-incident reviews are conducted after each event.

D: Recovery time objectives (RTOs) are shorter than recovery point objectives (RPOs).

- Testimonials -

Real Results From Real Students

Frequently Asked Question (FAQ's)

Q1:
Which of the following is the BEST indication of an effective information security program?

Q2:
An information security manager has learned of an increasing trend in attacks that use phishing emails impersonating an organization’s CEO in an attempt to commit wire transfer fraud. Which of the following is the BEST way to reduce the risk associated with this type of attack?

Q3:
When analyzing the emerging risk and threat landscape, an information security manager should FIRST:

Q4:
Which of the following is the BEST indication of an effective disaster recovery planning process?