Free ISACA CISM Practice Test & Real Exam Questions

Exam Code/Number: CISM
Exam Name/Title: Certified Information Security Manager
Certification Provider: ISACA
Corresponding Certification: Isaca Certification

Exam Questions: 1193
Updated On: Aug 05, 2026

Question #1

Which of the following is the MOST important reason to obtain senior management buy-in for the information security program?

A. To implement governance, risk, and compliance functions

B. To develop information security training for staff

C. To allocate funding for critical system recovery efforts

D. To support the implementation of information security policies and standards

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #2

Due to changes in an organization ' s environment, security controls may no longer be adequate. What is the information security manager ' s BEST course of action?

A. Transfer the new risk to a third party.

B. Review the previous risk assessment and countermeasures.

C. Evaluate countermeasures to mitigate new risks.

D. Perform a new risk assessment,

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #3

An organization recently activated its business continuity plan (BCP). Employees were notified during the event, but some did not fully follow the communications plan. What is the BEST way to prevent a recurrence?

A. Incentivize employees for following the plan

B. Perform tabletop testing with appropriate employees

C. Update the business impact analysis (BIA)

D. Enhance external communication instructions in the BCP

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #4

An organization is performing due diligence when selecting a third party. Which of the following is MOST helpful to reduce the risk of unauthorized sharing of information during this process?

A. Using secure communication channels

B. Obtaining industry references

C. Establishing mutual non-disclosure agreements (NDAs)

D. Requiring third-party privacy policies

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #5

An organization is planning to open a new office in another country. Sensitive data will be routinely sent between the two offices. What should be the information security manager's FIRST course of action?

A. Update privacy policies to include the other country's laws and regulations

B. Identify applicable regulatory requirements to establish security policies

C. Develop customized security training for employees at the new office

D. Encrypt the data for transfer to the head office based on security manager approval

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #6

Which of the following provides the BEST input to determine the level of protection needed for an IT system?

A. Asset classification

B. Threat analysis

C. Vulnerability assessment

D. Internal audit findings

Discussion 0

Correct Answer: A Vote an answer

Question #7

Which of the following BEST enables an organization to identify and contain security incidents?

A. Threat modeling

B. Tabletop exercises

C. Continuous monitoring

D. Risk assessments

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #8

Which of the following is the MAIN feature of a web application firewall?

A. Modifying its predefined configuration automatically based on malicious traffic

B. Filtering incoming Hypertext Transfer Protocol traffic

C. Restricting external traffic within a private network

D. Redirecting distributed denial-of-service attacks

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Download Free ISACA CISM Demo

Simply submit your e-mail address below to get started with our free demo of your ISACA CISM exam.