Free Preparation Discussions
MENU
Isaca CISM Exam Questions
- Topic 1: Information Security Management/ Identity Management
- Topic 2: Information Network Security Management Expectaions
- Topic 3: Information Security Governance
- Topic 4: InformationRisk Management
- Topic 5: Information Security Program
- Topic 6: Development and Management
- Topic 7: Information Security Incident Management
Free Isaca CISM Exam Actual Questions
Note: Premium Questions for CISM were last updated On Dec. 10, 2024 (see below)
An information security manager has learned of an increasing trend in attacks that use phishing emails impersonating an organization's CEO in an attempt to commit wire transfer fraud. Which of the following is the BEST way to reduce the risk associated with this type of attack?
When analyzing the emerging risk and threat landscape, an information security manager should FIRST:
Which of the following is the BEST indication of an effective disaster recovery planning process?
Following a risk assessment, an organization has made the decision to adopt a bring your own device (BYOD) strategy. What should the information security manager do NEXT?
Defining control requirements is the next step to ensure the security policy framework encompasses the new business model because it is a process of identifying and specifying the security measures and standards that are needed to protect the data and applications accessed by the BYOD devices. Defining control requirements helps to establish the baseline security level and expectations for the BYOD strategy, as well as to align them with the business objectives and risks. Therefore, defining control requirements is the correct answer.
https://www.digitalguardian.com/blog/ultimate-guide-byod-security-overcoming-challenges-creating-effective-policies-and-mitigating
https://learn.microsoft.com/en-us/mem/intune/fundamentals/byod-technology-decisions
Which of the following is the BEST defense-in-depth implementation for protecting high value assets or for handling environments that have trust concerns?
Compartmentalization is the best defense-in-depth implementation for protecting high value assets or for handling environments that have trust concerns because it is a strategy that divides the network or system into smaller segments or compartments, each with its own security policies, controls, and access rules. Compartmentalization helps to isolate and protect the most sensitive or critical data and functions from unauthorized or malicious access, as well as to limit the damage or impact of a breach or compromise. Compartmentalization also helps to enforce the principle of least privilege, which grants users or processes only the minimum access rights they need to perform their tasks. Therefore, compartmentalization is the correct answer.
https://www.csoonline.com/article/3667476/defense-in-depth-explained-layering-tools-and-processes-for-better-security.html
https://www.fortinet.com/resources/cyberglossary/defense-in-depth
https://sciencepublishinggroup.com/journal/paperinfo?journalid=542&doi=10.11648/j.ajai.20190302.11
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Lili
3 days agoBrittani
8 days agoJannette
13 days agoLeonor
22 days agoJohnetta
28 days agoDyan
1 months agoGlory
1 months agoLavera
1 months agoTroy
2 months agoFallon
2 months agoOllie
2 months agoStephanie
2 months agoArlen
2 months agoStephaine
3 months agoJunita
3 months agoBea
3 months agoMicah
4 months agoLavelle
5 months agoThurman
5 months agoAlline
5 months agoJerry
6 months agoChun
6 months ago