Free ISACA CISM Exam Dumps Questions & Answers

Which of the following is the PRIMARY objective of the incident management recovery phase?

• A.  To bring IT services back online
• B.  To recover business operation support
• C.  To perform a lessons-learned review
• D.  To document actions taken to restore IT systems

Which of the following roles is PRIMARILY responsible for developing an information classification framework based on business needs?

• A.  Information security steering committee
• B.  Senior management
• C.  Information owner
• D.  Information security manager

An organization has been penalized by regulatory authorities for failing to notify them of a major security breach that may have compromised customer data. Which of the following is MOST likely in need of review and updating to prevent similar penalties in the future?

• A.  Information security policies and procedures
• B.  Incident communication plan
• C.  Incident response training program
• D.  Business continuity plan (BCP)

Which of the following MOST directly influences the efficiency of incident response immediately after an incident has been detected?

• A.  Incident categorization
• B.  Incident containment and mitigation
• C.  Lessons learned
• D.  Root cause analysis

Which of the following metrics would BEST demonstrate the success of a newly implemented information security framework?

• A.  An increase in the number of compliant business processes
• B.  A decrease in the number of security audit findings
• C.  A decrease in the number of security policy exceptions
• D.  An increase in the number of identified security incidents