Certified Information Security Manager (CISM) Free Practice Exam Questions

1249 real Certified Information Security Manager (CISM) exam questions with answers and AI explanations. ISACA certification prep — page 2 of 125.

1. Question 11: Which of the following processes can be used to remediate identified technical vulnerabilities?
2. Question 12: Which of the following BEST validates that security controls are implemented in a new business process?
3. Question 13: Which of the following BEST provides an information security manager with sufficient assurance that a service provider complies with the organization's informa…
4. Question 14: Which of the following is the BEST strategy to implement an effective operational security posture?
5. Question 15: Which of the following is the MOST essential element of an information security program?
6. Question 16: If the inherent risk of a business activity is higher than the acceptable risk level, the information security manager should FIRST:
7. Question 17: What should be an information security manager's FIRST step when developing a business case for a new intrusion detection system (IDS) solution?
8. Question 18: An information security manager wants to document requirements detailing the minimum security controls required for user workstations. Which of the following r…
9. Question 19: Which of the following is MOST important to do after a security incident has been verified?
10. Question 20: Which of the following BEST enables the detection of advanced persistent threats (APTs)?