【2026年改版新题】CISM 国际信息安全经理认证CISM真题题库

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

收藏

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 练习进度 0 / 0

随机练习 自定义设置练习量

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

An organization has identified an increased threat of external brute force attacks in its environment. Which of the following is the MOST effective way to mitigate this risk to the organization's critical systems? 一个组织已经发现，在其环境中，外部暴力攻击的威胁正在增加。以下哪种方式是降低组织关键系统风险的最有效方式？

To optimize the implementation of information security governance in an organization, an information security manager should: 为了优化组织中信息安全治理的实施, 信息安全管理者应该:

Which of the following is an information security manager's BEST approach when selecting cost-effective controls needed to meet business objectives? 当选择满足业务目标所需的具有成本效益的控制时，下列哪一种是信息安全经理的最佳方法？

An organization has to comply with recently published industry regulatory requirements—compliance that potentially has high implementation costs. What should the information security manager do FIRST? 一个组织必须遵守最近公布的行业法规要求——遵守可能具有高实施成本的法规要求。信息安全经理首先应该做什么？

Which of the following is the BEST way to help ensure an organization's risk appetite will be considered as part of the risk treatment process? 以下哪一个是帮助确保一个组织的风险偏好的最佳方法将被视为风险处理过程？

An information security manager needs to ensure security testing is conducted on a new system. Which of the following would provide the HIGHEST level of assurance? 一个信息安全经理需要确保安全测试是在一个新的下列哪一项可以提供最高级别的保证？

Which of the following is the MOST effective way to detect information security incidents? 以下哪种方法是检测信息安全事件最有效的方法？

Which of the following is MOST likely to be a component of a security incident escalation policy? 以下哪一项最有可能成为安全事件升级策略的组成部分？

Which of the following should be an information security managers PRIMARY focus during the development of a critical system storing highly confidential data? 在开发存储高度机密数据的关键系统时，下列哪一项应该是信息安全管理者的首要关注点？

Which of the following has the GREATEST influence on an organization's information security strategy? 下列哪一项对组织的信息安全策略影响最大？

Which of the following BEST indicates that an organization has effectively tested its business continuity and disaster recovery plans within the stated recovery time objectives (RTOs)? 下列哪一项最佳表示组织在规定的恢复时间目标(RTOs)内有效地测试了其业务连续性和灾难恢复计划？

Which of the following is BEST determined by using technical metrics? 使用技术度量标准可以最好地确定下列哪一项？

Relationships among security technologies are BEST defined through which of the following? 安全技术之间的关系最好是通过以下哪一个来定义的？

Which of the following would be impacted the MOST by a business decision to move from traditional computing to cloud computing? 从传统计算转向云计算的商业决策会对下列哪一项产生最大的影响？

Which of the following would be an information security manager's PRIMARY challenge when deploying a bring your own device (BYOD) mobile program in an enterprise? 在企业中部署自带设备(BYOD)移动程序时，以下哪一项是信息安全经理的主要挑战？

Which of the following would be the BEST option to improve accountability for a system administrator who has security functions? 以下哪个选项是提高具有安全功能的系统管理员责任感的最佳选择？

In a business impact analysis, the value of an information system should be based on the overall cost: 在商业影响分析中，信息系统的价值应该基于总成本:

A corporate information security program is BEST positioned for success when: 一个企业信息安全项目在以下情况下最有可能取得成功:

Which of the following is the PRIMARY responsibility of an information security manager in an organization that is implementing the use of company-owned mobile devices in its operations? 下列哪一项是资讯保安经理在实施公司拥有的移动设备在其业务中的主要责任？

Which of the following is the MAIN benefit of performing an assessment of existing incident response processes? 以下哪一项是对现有事故应变过程进行评估的主要好处？