What would be the PRIMARY reason for an organization to conduct a simulated phishing attack on its employees as part of a social engineering assessment?
Answer(s): A
Which of the following activities should take place FIRST when a security patch for Internet software is received from a vendor?
An information security manager has researched several options for handling ongoing security concerns and will be presenting these solutions to business managers. Which of the following will BEST enable business managers to make an informed decision?
Which of the following would BEST ensure that application security standards are in place?
Answer(s): D
Which of the following is the BEST criterion to use when classifying assets?
Answer(s): C
Post your Comments and Discuss ISACA CISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISM content, but please register or login to continue.