Certified Information Security Manager1,243 questions across 125 pages are complete and free, with no account or card.
1243 questions in this bank
Free access · progress saved on this device
Which of the following BEST indicates effective information security governance?
Answer: B
Effective information security governance is best indicated by regular steering committee meetings (Option B). This is because these meetings ensure continuous oversight, strategic alignment, and management support for the information security program
Source: Adapted from community discussion — hargit
The MOST useful technique for maintaining management support for the information security program is:
Answer: A
A. informing management about the security of business operations. Providing regular updates and informing management about the security of business operations is a critical aspect of maintaining their support for the information security program. This involves communicating the effectiveness of security measures, highlighting achievements, and addressing any concerns or risks that may impact the organization. By keeping management informed about the security posture and its positive impact on business operations, it helps build trust and ensures ongoing support. While the other options (B. identifying the risks and consequences, C. benchmarking the security programs, and D. implementing a comprehensive security awareness program) are valuable activities, consistently communicating the security status and its alignment with business objectives is essential for maintaining long-term management support.
Source: Adapted from community discussion — TamerBeSafe
When remote access is granted to a company's internal network, the MOST important consideration should be that access is provided:
Answer: D
Which of the following should be triggered FIRST when unknown malware has infected an organization's critical system?
Answer: C
Which of the following is the FIRST step in developing a business impact analysis (BIA)?
Answer: C
Which of the following is MOST important when defining how an information security budget should be allocated?
Answer: C
A forensic examination of a PC is required, but the PC has been switched off. Which of the following should be done FIRST?
Answer: B
My apologies, my previous comment was completely wrong and I was thinking of a “write-blocker”. The device in mention a ”write-blocking device” just a much safer way of copying across all data so it is definitely the answer.
Source: Adapted from community discussion — AaronS1990
Which of the following should an organization do FIRST when confronted with the transfer of personal data across borders?
Answer: D
Which of the following BEST enables an organization to measure the total time that operations can be sustained at an alternative site designated in the business continuity plan (BCP)?
Answer: C
Nope. Your definition of MTO is completely wrong. As luck would have it the answer is C. But why is it C? MTO is actually “the maximum amount of time an enterprise can tolerate processing in alternate mode”. This definition is word for word from ISACA’s glossary. Pick up a book sometime and maybe stop trying to use AI to pass an exam for you. You spread misinformation and devalue input from people who actually know what they’re on about. Furthermore, I actually get second-hand embarrassment just reading comments from the likes of you.
Source: Adapted from community discussion — AaronS1990
Which of the following has the GREATEST influence on the successful integration of information security within the business?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISM practice, question 1111. 1243 questions available.
Version 1.0.0. How we source questions