Free Isaca CISM Exam Questions
Try our Free Demo Practice Tests for Comprehensive CISM Exam Preparation
-
Isaca CISM Exam Questions
-
Provided By: Isaca
- Exam: Certified Information Security Manager
- Certification: CISM
-
Total Questions: 975
-
Updated On: Feb 19, 2026
-
Rated: 4.9 |
-
Online Users: 1950
-
Question 1
-
A software vendor has announced a zero-day vulnerability that exposes an organization's critical business
systems. The vendor has released an emergency patch. Which of the following should be the information
security managers PRIMARY concern?
Answer: D
-
A software vendor has announced a zero-day vulnerability that exposes an organization's critical business
systems. The vendor has released an emergency patch. Which of the following should be the information
security managers PRIMARY concern?
-
Question 2
-
Which of the following would be of GREATEST assistance in determining whether to accept residual risk of
a critical security system?
Answer: B
-
Which of the following would be of GREATEST assistance in determining whether to accept residual risk of
a critical security system?
-
Question 3
-
An organization has received complaints from users that some of their files have been encrypted. These users
are receiving demands for money to decrypt the files. Which of the following would be the BEST course of
action?
Answer: D
-
An organization has received complaints from users that some of their files have been encrypted. These users
are receiving demands for money to decrypt the files. Which of the following would be the BEST course of
action?
-
Question 4
-
Which of the following is the BEST way to help ensure an organization's risk appetite will be considered as
part of the risk treatment process?
Answer: D
-
Which of the following is the BEST way to help ensure an organization's risk appetite will be considered as
part of the risk treatment process?
-
Question 5
-
Which of the following should an information security manager do FIRST when noncompliance with security
standards is identified?
Answer: B
-
Which of the following should an information security manager do FIRST when noncompliance with security
standards is identified?