[2026] ISACA Certified Information Security Manager

문제1

In order to gain organization-wide support for an information security program, which of the following is MOST important to consider?

A. Maturity of the security policy

B. Corporate risk framework

C. Corporate culture

D. Clarity of security roles and responsibilities

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제2

Which of the following is the MOST important outcome of a post-incident review?

A. The system affected by the incident is restored to its prior state.

B. The person responsible for the incident is identified.

C. The root cause of the incident is determined.

D. The impact of the incident is reported to senior management.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제3

When collecting admissible evidence, which of the following is the MOST important requirement?

A. Need to know

B. Preserving audit logs

C. Chain of custody

D. Due diligence

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제4

Which of the following is the PRIMARY reason to assign a risk owner in an organization?

A. To define responsibilities

B. To ensure accountability

C. To identify emerging risk

D. To remediate residual risk

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제5

An information security manager notes that security incidents are not being appropriately escalated by the help desk after tickets are logged. Which of the following is the BEST automated control to resolve this issue?

A. Changing the default setting for all security incidents to the highest priority

B. Integrating incident response workflow into the help desk ticketing system

C. Integrating automated service level agreement (SLA) reporting into the help desk ticketing system

D. Implementing automated vulnerability scanning in the help desk workflow

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제6

The PRIMARY purpose of conducting a business impact analysis (BIA) is to determine the:

A. scope of the incident response plan.

B. scope of the business continuity program.

C. recovery time objective (RTO).

D. resources needed for business recovery.

정답: D

문제7

Which of the following will BEST enable an effective information asset classification process?

A. Including security requirements in the classification process

B. Assigning ownership

C. Analyzing audit findings

D. Reviewing the recovery time objective (RTO) requirements of the asset

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제8

Which of the following should be the PRIMARY goal of information security?

A. Data governance

B. Information management

C. Business alignment

D. Regulatory compliance

정답: C

문제9

Which of the following has the MOST influence on the inherent risk of an information asset?

A. Risk tolerance

B. Return on investment (ROI)

C. Net present value (NPV)

D. Business criticality

정답: D

설명: (Fast2test 회원만 볼 수 있음)

ISACA Certified Information Security Manager - CISM무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트