Certified Information Security Manager (CISM) Free Practice Exam Questions

1249 real Certified Information Security Manager (CISM) exam questions with answers and AI explanations. ISACA certification prep — page 36 of 125.

1. Question 351: Which of the following MUST be defined in order for an information security manager to evaluate the appropriateness of controls currently in place?
2. Question 352: What is the PRIMARY benefit to an organization when information security program requirements are aligned with employment and staffing processes?
3. Question 353: Which of the following is an example of risk mitigation?
4. Question 354: Which of the following BEST enables an organization to provide ongoing assurance that legal and regulatory compliance requirements can be met?
5. Question 355: Which of the following would BEST ensure that security is integrated during application development?
6. Question 356: Which of the following is MOST important in increasing the effectiveness of incident responders?
7. Question 357: When performing a business impact analysis (BIA), who should calculate the recovery time and cost estimates?
8. Question 358: Which of the following is the GREATEST benefit of information asset classification?
9. Question 359: While classifying information assets, an information security manager notices that several production databases do not have owners assigned to them. What the i…
10. Question 360: An organization is increasingly using Software as a Service (SaaS) to replace in-house hosting and support of IT applications. Which of the following would be…