Question 1

Which of the following is the BEST way to reduce the risk associated with a bring your own device (BYOD) program?

AImplement a mobile device policy and standard.

BProvide employee training on secure mobile device practices.

CImplement a mobile device management (MDM) solution.

DRequire employees to install an effective anti-malware app.

Answer : B

Question 2

Which of the following is the MOST important reason to document information security incidents that are reported across the organization?

AEvaluate the security posture of the organization.

BIdentify unmitigated risk.

CPrevent incident recurrence.

DSupport business investments in security.

Answer : C

Question 3

A financial institution is planning to develop a new mobile application. Which of the following is the BEST time to begin assessments of the application's security compliance?

ADuring user acceptance testing (UAT)

BDuring the design phase

CDuring static code analysis

DDuring regulatory review

Answer : B

Question 4

Which of the following BEST enables an incident response team to determine appropriate actions during an initial investigation?

AFeedback from affected departments

BHistorical data from past incidents

CTechnical capabilities of the team

DProcedures for incident triage

Answer : D

Question 5

When analyzing the emerging risk and threat landscape, an information security manager should FIRST:

Adetermine the impact if threats materialize.

Bdetermine the sources of emerging threats.

Creview historical threats within the industry.

Dmap threats to business assets.

Answer : B

Free Practice Questions for Isaca CISM Exam

Question 1

Question 2

Question 3

Question 4

Question 5