Free CISM – Certified Information Security Manager Practice Test Question

Free demo downloads

Loading demo links...

Showing 4–6 of 15 questions

Question 4

Which of the following BEST enables an organization to transform its culture to support information security?

Select an option, then click Submit answer.

  • ○

    Periodic compliance audits

  • ○

    Strong management support

  • ○

    Robust technical security controls

  • ○

    Incentives for security incident reporting

Question 5

Which of the following BEST facilitates effective incident response testing?

Select an option, then click Submit answer.

  • ○

    Including all business units in testing

  • ○

    Simulating realistic test scenarios

  • ○

    Reviewing test results quarterly

  • ○

    Testing after major business changes

Question 6

The MOST appropriate time to conduct a disaster recovery test would be after:

Select an option, then click Submit answer.

  • ○

    major business processes have been redesigned.

  • ○

    the business continuity plan (BCP) has been updated.

  • ○

    the security risk profile has been reviewed

  • ○

    noncompliance incidents have been filed.