Download Free SPOTO 2020 Real CISM Practice Test

For the CISM exam preparation, you must be familiar with the real exam structure. Therefore, SPOTO offers this 2020 real CISM practice test. In this test, you will confront ten real CISM questions. There are verified answers after each question. So Enjoy the CISM mock test to test yourself!

Get SPOTO 100% CISM real practice tests or CISM proxy service to pass in the 1st try!

Categories	Exam Code	100% Pass Dumps
ISACA	CISA
	CISM
	CISA/CISM/CRISC proxy service

1.What should be an information security manager’s FIRST step when developing a business case for a new intrusion detection system (IDS) solution?

Define the issues to be addressed.
Calculate the total cost of ownership (TCO).
Perform a cost-benefit analysis.
Conduct a feasibility study.

Answer: C

2.Which of the following is the MOST critical outcome of the monitoring and reporting on information security processes?

Ensuring information security operations support control objectives
Ensuring information security operations follow approved procedures
Ensuring information security operations are reviewed for effectiveness
Ensuring information security operations meet service level agreements (SLA)

Answer: A

3.Which of the following is most critical for an information security manager to include in a report to senior management following a post-incident review?

The incident response plan
Lessons learned
Snapshot of system logs
Detailed metrics

Answer: B

4.Which of the following is the BEST way to rigorously test a disaster recovery plan for a mission-critical system without disrupting business operations?

Checklist review
Parallel testing
Simulation testing
Structured walk-through

Answer: C

5.Which of the following is the BEST evidence that information security governance works as a business enabler?

Security key performance indicators (KPIs) are included in management briefings.
Business initiatives are prioritized over security initiatives.
Security initiatives have a positive return on investment (ROI).
Business initiatives are within risk tolerance.

Answer: D

6.An internal control audit has revealed a control deficiency related to a legacy system where the compensating controls no longer appear significant. Which of the following would BEST help the information security manager determine the security requirements to resolve the control deficiency?

Gap analysis
Cost-benefit analysis
Business case
Risk assessment

Answer: A

7.The BEST way to determine the current state of information security about defined security objectives is by performing a:

gap analysis.
Business impact analysis (BIA).
Risk assessment.
Cost-benefit analysis.

Answer: A

8.Which of the following is the PRIMARY benefit of using a tabletop method to conduct an incident response exercise?

The potential impact to business operations is minimized.
The readiness of applications for testing is ensured.
The effect of IT systems on business operations is quantified.
Visibility into personnel effectiveness is increased.

Answer: D

9.An organization uses a particular encryption protocol for externally facing web pages and critical financial services. A security firm publicizes a critical security flaw in the encryption protocol. Which of the following should the information security manager do FIRST?

Perform a risk assessment.
Activate the incident response team.
Isolate potentially vulnerable systems.
Remediate the vulnerability.

Answer: C

10.Which of the following should an information security manager do FIRST when an organization plans to migrate all internally hosted applications to the cloud?

Develop key risk indicators (KRIs).
Create an information security action plan.
Determine information security requirements for the cloud.
Assess the risk associated with cloud services.

Answer: D

Why you need SPOTO CISM Practice Tests?

SPOTO CISM Practice Test contains Real Questions and Answers. To ace the CISM exam, all you have to do is purchase SPOTO CISM Dumps File, memorize the Questions and Answers, Practice with our VCE Exam Simulator, and be ready for Real Test!