CISM (CISM) 4

Question 1

Which of the following BEST describes the purpose of a security operations center (SOC)?

Accepted Answer

To continuously monitor, detect, and respond to security incidents

Answer

A SOC provides continuous monitoring and incident detection and response capabilities to protect the organization.

Question 2

When conducting a post-incident review, which outcome is MOST valuable for improving the security program?

Accepted Answer

Identifying root causes and implementing corrective actions

Answer

Root cause analysis and corrective actions prevent recurrence and strengthen the overall security posture.

Question 3

An organization's risk register shows a risk that has been accepted for three years. What action should the CISM recommend?

Accepted Answer

Review the risk to determine if it remains within acceptable tolerance given current conditions

Answer

Accepted risks must be periodically reviewed because threat landscapes, business conditions, and risk tolerances change over time.

Question 4

Which security framework is PRIMARILY focused on managing and improving cybersecurity risk in critical infrastructure sectors?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

The NIST CSF was developed specifically to help critical infrastructure organizations manage and reduce cybersecurity risk.

Question 5

A CISM is tasked with reducing the attack surface of the organization. Which approach BEST achieves this goal?

Accepted Answer

Implementing least privilege access and removing unnecessary services

Answer

Least privilege access and eliminating unnecessary services directly reduces the number of exploitable entry points for attackers.

CISM - Certified Information Security Manager Practice Test