CISM (CISM) 5

Question 1

An organization experiences a ransomware attack that encrypts critical data. Which recovery option should be prioritized FIRST?

Accepted Answer

Restore systems from the most recent clean backup

Answer

Restoring from clean backups is the fastest and most reliable recovery method that avoids funding criminal activity.

Question 2

Which of the following BEST defines inherent risk in the context of information security risk management?

Accepted Answer

Risk that exists before any controls are implemented

Answer

Inherent risk is the level of risk existing in the absence of any controls or mitigating factors.

Question 3

A CISM is asked to demonstrate the ROI of the security program. Which approach is MOST appropriate?

Accepted Answer

Quantify avoided losses through risk reduction compared to security investment costs

Answer

ROI is best demonstrated by comparing the value of risk reduction (avoided losses) against the cost of security investments.

Question 4

Which of the following is the MOST important factor when prioritizing security vulnerabilities for remediation?

Accepted Answer

The combined assessment of exploitability and potential business impact

Answer

Prioritization should consider both exploitability and the potential impact to the organization's specific business context.

Question 5

An organization is considering outsourcing its security monitoring to a managed security service provider (MSSP). What is the MOST critical concern the CISM should address?

Accepted Answer

Defining clear SLAs, escalation procedures, and data handling requirements

Answer

SLAs, escalation procedures, and data handling requirements are foundational to ensuring the MSSP delivers acceptable security outcomes.

CISM - Certified Information Security Manager Practice Test

CISM - Certified Information Security Manager Practice Test

CISM (CISM) 5