[2026] ISACA Certified Information Security Manager

문제1

An organization needs to comply with new security incident response requirements. Which of the following should the information security manager do FIRST?

A. Revise the existing incident response plan.

B. Conduct a gap analysis.

C. Create a business case for a new incident response plan.

D. Assess the impact to the budget,

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제2

An organization recently updated and published its information security policy and standards. What should the information security manager do NEXT?

A. Update the organization's risk register.

B. Conduct a risk assessment.

C. Communicate the changes to stakeholders.

D. Develop a policy exception process.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제3

Which of the following BEST indicates that an organization has effectively tested its business continuity and disaster recovery plans within the stated recovery time objectives (RTOs)?

A. Business needs are being met.

B. Regulatory requirements are being met.

C. Internal compliance requirements are being met.

D. Risk management objectives are being met.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제4

Which of the following is the BEST course of action if the business activity residual risk is lower than the acceptable risk level?

A. Monitor the effectiveness of controls

B. Review the inherent risk level

C. Update the risk assessment framework

D. Review the risk probability and impact

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제5

Which of the following would BEST mitigate accidental data loss events?

A. Conduct periodic user awareness training.

B. Conduct a data loss prevention (DLP) audit.

C. Obtain senior management support for the information security strategy.

D. Enforce a data hard drive encryption policy.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제6

Which of the following is the MOST important objective of post-incident review activities?

A. Incident triage

B. Evidence collection

C. Incident documentation

D. Continuous improvement

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제7

An organization is increasingly using Software as a Service (SaaS) to replace in-house hosting and support of IT applications. Which of the following would be the MOST effective way to help ensure procurement decisions consider information security concerns?

A. Integrate information security risk assessments into the procurement process.

B. Enforce the right to audit in procurement contracts with SaaS vendors.

C. Invite IT members into regular procurement team meetings to influence best practice.

D. Provide regular information security training to the procurement team.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제8

What is the PRIMARY benefit to an organization that maintains an information security governance framework?

A. Resources are prioritized to maximize return on investment (ROI)

B. The organization remains compliant with regulatory requirements.

C. Business risks are managed to an acceptable level.

D. Information security guidelines are communicated across the enterprise_

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제9

Which of the following should include contact information for representatives of equipment and software vendors?

A. Business impact analysis (BIA)

B. Service level agreements (SLAs)

C. Business continuity plan (BCP)

D. Information security program charter

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제10

A global organization is developing an incident response team. The organization wants to keep headquarters informed of all incidents and wants to be able to present a unified response to widely dispersed events. Which of the following BEST supports these objectives?

A. Centralized incident response team

B. Outsourced incident response team

C. Distributed incident response team

D. Virtual incident response team

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제11

Which of the following BEST helps to ensure the effective execution of an organization's disaster recovery plan (DRP)?

A. Procedures are available at the primary and failover location.

B. Process steps are documented by the disaster recovery team.

C. The plan is reviewed by senior and IT operational management.

D. The plan is based on industry best practices.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제12

Which of the following will BEST facilitate timely and effective incident response?

A. Including penetration test results in incident response planning

B. Assessing the risk of compromised assets

C. Classifying the severity of an incident

D. Notifying stakeholders when invoking the incident response plan

정답: C

문제13

Which of the following should be done FIRST when developing a business continuity plan (BCP)?

A. Review existing cyber insurance coverage.

B. Prioritize the critical processes.

C. Review current recovery policies.

D. Define the organizational strategy.

정답: D

ISACA Certified Information Security Manager - CISM무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트