Certified Information Security Manager (CISM) Free Practice Exam Questions

1249 real Certified Information Security Manager (CISM) exam questions with answers and AI explanations. ISACA certification prep — page 7 of 125.

1. Question 61: Which of the following provides the MOST comprehensive information related to an organization's current risk profile?
2. Question 62: Which of the following should an information security manager do FIRST to address the risk associated with a new third-party cloud application that will not me…
3. Question 63: Which of the following clauses would represent the MOST significant potential exposure if included in a contract with a third-party service provider?
4. Question 64: An intrusion has been detected and contained. Which of the following steps represents the BEST practice for ensuring the integrity of the recovered system?
5. Question 65: An event occurred that resulted in the activation of the business continuity plan (BCP). All employees were notified during the event, and they followed the pl…
6. Question 66: Which of the following has the GREATEST impact on the viability of an information security roadmap?
7. Question 67: An organization wants to enable digital forensics for a business-critical application. Which of the following will BEST help to support this objective?
8. Question 68: Which of the following is the PRIMARY reason that an information security manager would contract with an external provider to perform penetration testing?
9. Question 69: What is the FIRST line of defense against criminal insider activities?
10. Question 70: Which of the following is MOST important to include when reporting information security risk to executive leadership?