Certified Information Security Manager (CISM) Free Practice Exam Questions

1249 real Certified Information Security Manager (CISM) exam questions with answers and AI explanations. ISACA certification prep — page 94 of 125.

1. Question 931: Which of the following MOST effectively supports an organization's security culture?
2. Question 932: Which of the following should an information security manager do FIRST upon notification of a potential security risk associated with a third-party service pro…
3. Question 933: An incident management team leader sends out a notification that the organization has successfully recovered from a cyberattack. Which of the following should…
4. Question 934: Which of the following defines the MOST comprehensive set of security requirements for a newly developed information system?
5. Question 935: Which of the following information security practices would BEST prevent a SQL injection attack?
6. Question 936: Which of the following is a viable containment strategy for a distributed denial of service (DDoS) attack?
7. Question 937: A data discovery project uncovers an unclassified process document. Of the following, who is BEST suited to determine the classification?
8. Question 938: Which of the following is MOST important to include in a post-incident report?
9. Question 939: When creating an incident response plan, the triggers for the business continuity plan (BCP) MUST be based on:
10. Question 940: An organization's information security strategy should be the PRIMARY input to which of the following?