最新的ISACA CISM免費考試真題

問題1

It is MOST important that risk owners understand they are accountable for:

A. reporting risk metrics and control compliance status to the information security manager.

B. overseeing and monitoring the effectiveness of controls associated with the risk.

C. escalating control deficiencies associated with the risk to the steering committee for decision making.

D. collaborating with stakeholders to evaluate the effectiveness of controls associated with the risk.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題2

A software bug reported by external sources should trigger which of the following processes to assess the affected applications?

A. Root cause analysis

B. Continuous improvement

C. Problem management

D. Vulnerability management

正確答案: D

說明：（僅 Fast2test 成員可見）

問題3

To overcome the perception that security is a hindrance to business activities, it is important for an information security manager to:

A. reiterate the necessity of security.

B. promote the relevance and contribution of security.

C. rely on senior management to enforce security.

D. focus on compliance.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題4

Which of the following should an information security manager do FIRST upon learning that a competitor has experienced a ransomware attack?

A. Perform a full data backup.

B. Conduct ransomware awareness training for all staff.

C. Update indicators of compromise in the security systems.

D. Review the current risk assessment.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題5

Which of the following will have the GREATEST impact on the development of the information classification scheme consisting of various classification levels?

A. Value of the information

B. Organizational structure

C. Owners of the information

D. Data format

正確答案: A

問題6

Which of the following is an input used to calculate system-level risk?

A. Key risk indicators (KRIs)

B. System risk appetite

C. System vulnerabilities

D. Business impact analysis (BIA)

正確答案: C

說明：（僅 Fast2test 成員可見）

問題7

Which of the following is MOST important to consider when planning the eradication of a cyberattack?

A. Knowledge about the type and source of the threat

B. Obtain a clean backup of the operating system

C. The cost of tools and efforts required for the process

D. The skills and competencies of the eradication team

正確答案: A

問題8

What is the BEST way to identify noncompliance with password policies?

A. Internal audit assessment

B. Security awareness training

C. Vulnerability scan reports

D. Business impact analysis (BIA)

正確答案: A

說明：（僅 Fast2test 成員可見）

問題9

Which of the following should be the FIRST step after identifying a potential security breach at a cloud service provider?

A. Validate the breach with the provider.

B. Refer to the organization's business continuity plan (BCP).

C. Follow the provider's response plan.

D. Notify senior management.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題10

Which of the following would be the BEST way to reduce the risk of disruption resulting from an emergency system change?

A. Confirm the change implementation is scheduled.

B. Confirm rollback plans are in place.

C. Verify the change request has been approved.

D. Notify users affected by the change.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題11

Which tool BEST supports both automated detection and incident response across multiple technology domains?

A. Extended detection and response (XDR)

B. Security orchestration, automation, and response

C. Security information and event management (SIEM)

D. Endpoint detection and response (EDR)

正確答案: B

說明：（僅 Fast2test 成員可見）

問題12

An organization is developing an information security program. Which of the following will be MOST helpful in the early stages of this effort?

A. Subscribing to a threat monitoring service

B. Inventorying the organization's information assets

C. Establishing information security awareness training

D. Performing a business impact analysis (BIA)

正確答案: B

說明：（僅 Fast2test 成員可見）

問題13

Which of the following is the GREATEST benefit of using AI tools in security operations?

A. Prioritized vulnerabilities

B. Reduced time and effort required to patch systems

C. Rapid detection and response to threats

D. Defined risk tolerance

正確答案: C

說明：（僅 Fast2test 成員可見）

問題14

When establishing metrics for an information security program, the BEST approach is to identify indicators that:

A. support major information security initiatives.

B. reduce information security program spending.

C. reflect the corporate risk culture.

D. demonstrate the effectiveness of the security program.

正確答案: D

最新的ISACA Certified Information Security Manager - CISM免費考試真題

聯系我們

站內鏈接

最新更新