ISACA’s Certified Information Security Manager - Exam Code CISM - V 1.0 - Practice Questions

Sep 4, 2026

Upload by Bintang

Practice-style materials for ISACA’s Certified Information Security Manager (CISM) exam, structured as multiple-choice questions with detailed rationales. The content focuses on information security decision-making and governance topics, including first-response steps for computer forensics when a system is powered off, handling conflicts between approved mobile access policies and industry best practices, and allocating an information security budget based on the most critical planning element. Answers emphasize risk, integrity of evidence, and alignment to business objectives.

LanguageEnglish

CategoryExam

FormatPDF

Pages10

Reading Time25 min

AccessFree to download

Practice Questions

Computer Forensics: First Steps

Mobile Access Standards and Governance

Information Security Budget Allocation

Exam Name: ISACA’s Certified Information Security Manager Exam Code: CISM _V_ 1.0 Contact us Total No. of Questions In Dumps: [Website:www.originaldumps.com](Website:www.originaldumps.com) Total no. of questions in Real Exam: 150 Email [Id:Info@originaldumps.com](Id:Info@originaldumps.com) [Passing Percentage: 56% Contact:](Passing Percentage: 56% Contact:) +91-8102473804 Exam Duration: 240 minutes | Question 1 | | --- | | Question Type: MultipleChoice | A forensic examination of a PC is required, but the PC has been switched off. Which of the following should be done FIRST? Options: | A-Perform a backup of the hard drive using backup utilities.
B-Perform a bit-by-bit backup of the hard disk using a write-blocking device C-Perform a backup of the computer using the network
D- Reboot the system using third-party forensic software in the CD-ROM drive
Answer: | | --- | | B
Explanation: | Performing a bit-by-bit backup of the hard disk using a write-blocking device is the ﬁrst step to do when a forensic examination of a PC is required, but the PC has been switched off because it helps to create a forensically sound copy of the original evidence without altering or damaging it. A bit-by-bit backup, also known as a physical or raw image, is a complete copy of every bit on the hard disk, including the unallocated or deleted data. A write-blocking device is a hardware or software tool that prevents any write operations to the hard disk, such as updating timestamps or changing ﬁle attributes. Performing a bit-by-bit backup of the hard disk using a write-blocking device ensures the integrity and authenticity of the evidence and allows the forensic analysis tobe conducted on the duplicate image rather than the original source. Therefore, performing a bitby-bit backup of the hard disk using a write-blocking device is the correct answer. [https://en.wikipedia.org/wiki/Computer_forensics](https://en.wikipedia.org/wiki/Computer_forensics) [https://resources.infosecinstitute.com/topic/computer-forensics-forensic-analysis-examination-pla](https://resources.infosecinstitute.com/topic/computer-forensics-forensic-analysis-examination-pla)[nning/](nning/) [https://www.computer-forensics-recruiter.com/topics/examination_steps/](https://www.computer-forensics-recruiter.com/topics/examination_steps/) Question 2 Question Type: MultipleChoice Senior management recently approved a mobile access policy that conﬂicts with industry best practices. Which of the following is the information security manager's BEST course of action when developing security standards for mobile access to the organization's network? Options: | A-Align the standards with the organizational policy. B-Align the standards with industry best practices.
C- Resolve the discrepancy before developing the standards.
D-Perform a cost-beneﬁt analysis of aligning the standards to policy.
Answer: | | --- | | C
Explanation: | The Information Security Manager's primary responsibility is to ensure that the organization's information assets are adequately protected. In this scenario, there is a conﬂict between the approved mobile access policy and industry best practices. Developing security standards based on a ﬂawed policy could lead to signiﬁcant security vulnerabilities. Why the other options are not the best course of action: A . Align the standards with the organizational policy: This would perpetuate the misalignment with best practices, potentially leaving the organization exposed to risks. B . Align the standards with industry best practices: While this is ideal from a security perspective, it directly contradicts the approved policy, which could create operational and compliance issues. D . Perform a cost-beneﬁt analysis of aligning the standards to policy: A cost-beneﬁt analysis might be useful at some point, but it does not address the fundamental issue of a policy that isnot in line with best practices. Key CISM

FAQs

In a PC forensic exam where the PC is switched off, what should be done FIRST?

Perform a bit-by-bit backup of the hard disk using a write-blocking device.

When developing mobile access security standards that conflict with industry best practices, what is the BEST action?

Proactively engage senior management to highlight the discrepancy and revise the policy to address the risk and align with best practices.

What is MOST important when defining how an information security budget should be allocated?

The information security strategy, because it aligns security objectives and initiatives with business goals and priorities.

Sep 4, 2026

Upload by Bintang