Free ISACA CISM Exam Dumps Questions & Answers

When designing a disaster recovery plan (DRP), which of the following MUST be available in order to prioritize system restoration?

• A.Systems inventory
• B.Recovery procedures
• C.Business impact analysis (BIA) results
• D.Key performance indicators (KPIs)

Which of the following is the BEST way to ensure the capability to restore clean data after a ransomware attack?

• A.Encrypt sensitive production data
• B.Purchase cyber insurance
• C.Perform Integrity checks on backups
• D.Maintain multiple offline backups

An organization has acquired a company in a foreign country to gain an advantage in a new market. Which of the following is the FIRST step the information security manager should take?

• A.Apply the existing information security program to the acquired company.
• B.Evaluate the information security laws that apply to the acquired company.
• C.Determine which country ' s information security regulations will be used.
• D.Merge the two existing information security programs.

Which of the following BEST facilitates effective incident response testing?

• A.Simulating realistic test scenarios
• B.Reviewing test results quarterly
• C.Testing after major business changes
• D.Including all business units in testing

Which of the following is the BEST way to determine if an information security profile is aligned with business requirements?

• A.Review control self-assessment (CSA) results
• B.Review security-related key risk indicators (KRIs)
• C.Review the key performance indicator (KPI) dashboard
• D.Review periodic security audits