Which of the following is a key principle of the CISM framework?

What is one of the primary roles of a CISM professional?

Which domain is NOT included in the CISM framework?

What does the 'C' in CISM stand for?

Which of the following is a critical component of CISM certification?

What is the primary focus of the CISM certification?

Which of the following best describes the relationship between CISM and information security governance?

Which of the following is essential in the incident management process in the CISM framework?

What type of information does CISM emphasize protecting?

Which of the following approaches is recommended in the CISM framework for ensuring continuous improvement in security practices?

Which of the following best describes the role of an information security manager?

What is one of the primary responsibilities of an information security manager?

Which framework is commonly used by information security managers to develop an organization's security policies?

Which of the following is a key skill an information security manager should possess?

What is typically the first step an information security manager should take in developing a security strategy?

Which compliance regulation focuses specifically on protecting personal health information?

What type of attack is characterized by overwhelming a system with traffic to disrupt service?

What is the purpose of an incident response plan in information security management?

Which of the following best defines 'phishing' in the context of information security?

What is the role of encryption in information security?

What is a common method to protect sensitive data from unauthorized access?

Which of the following is a principle of the CIA triad in information security?

What does two-factor authentication (2FA) primarily help to enhance?

Which type of malware is specifically designed to replicate itself and spread to other computers?

What is the primary purpose of a firewall in network security?

Which encryption standard is widely used for securing wireless networks?

What is the primary function of an intrusion detection system (IDS)?

What is phishing primarily aimed at achieving?

Which of the following best defines a DDoS attack?

What type of security testing aims to identify vulnerabilities in a system's security before attackers exploit them?

What is the primary purpose of risk assessment in security management?

Which of the following is a common tool used for managing security incidents?

What does the acronym CIA stand for in the context of security management?

What is the most effective way to ensure the physical security of a facility?

What is a vulnerability assessment in security management?

Which of the following is a key component of an effective information security program?

What is the purpose of a security audit?

What is the main goal of data encryption in security management?

What is the purpose of a business continuity plan?

Which of the following is considered a physical security control?