A new era for Phoenix TS.

Click here to learn more.

Hubs
- LEXX Live
- LEXX Online
- LEXX Bookstore
- LEXX Coach COMING SOON
Courses
- Brand
  
  AI CERTs
  
  AI Training
  
  AWS
  
  CertNexus
  
  Check Point
  
  Chef
  
  Cisco
  
  Citrix
  
  CMMC
  
  CompTIA
  
  EC-Council
  
  FITSI
  
  Fortinet
  
  Global Space University
  
  ISACA
  
  ISC2
  
  ITIL®
  
  Leadership and Management
  
  Microsoft
  
  Nutanix
  
  OffSec
  
  Phoenix TS
  
  Project Management Institute (PMI)
  
  Python
  
  Red Hat Linux
  
  Robert H. Smith School of Business
  
  Scrum Alliance
  
  Veeam
  Topic
  
  Agile
  
  Artificial Intelligence
  
  Business Analysis
  
  Cloud & Saas
  
  CMMC
  
  Cyber Security
  
  Data Mining Analysis
  
  Data Science
  
  Databases
  
  Government
  
  Hardware & Software
  
  Leadership
  
  Linux
  
  Mobile Computing
  
  Networking
  
  Programming
  
  Project Management
  
  Soft Skills
  
  Software Development
  
  Space Professional
  
  Storage & Backup
  
  VoIP
- 04/27/2026 - 04/30/2026
  
  CCA - Certified CMMC Assessor
  
  04/27/2026 - 04/30/2026
  
  CCP - Certified CMMC Professional
  
  04/27/2026 - 05/1/2026
  
  CGRC (Certified in Governance, Risk and Compliance)
  
  04/27/2026 - 05/1/2026
  
  AI+ Security Level 3
  
  04/27/2026 - 05/1/2026
  
  AI+ Security Compliance
  
  04/27/2026 - 05/1/2026
  
  AI+ Architect
  
  04/27/2026 - 05/1/2026
  
  AI+ Ethical Hacker
  
  04/28/2026 - 04/30/2026
  
  ITIL® 4 Specialist: Create, Deliver, Support
  
  04/28/2026 - 04/30/2026
  
  ITIL ® 4 Foundation
  
  04/28/2026 - 04/28/2026
  
  AZ-900T00: Microsoft Azure Fundamentals
  
  05/4/2026 - 05/8/2026
  
  CompTIA Data +
  
  05/4/2026 - 05/8/2026
  
  CompTIA Data +
  
  05/4/2026 - 05/8/2026
  
  MD 102 - Microsoft 365 Endpoint Administrator
  
  05/4/2026 - 05/8/2026
  
  MD 102 - Microsoft 365 Endpoint Administrator
  
  05/4/2026 - 05/8/2026
  
  EDRP - Disaster Recovery Professional
- 04/28/2026 - 04/30/2026
  
  ITIL ® 4 Foundation
  
  04/28/2026 - 04/28/2026
  
  AZ-900T00: Microsoft Azure Fundamentals
  
  05/11/2026 - 05/15/2026
  
  CISA (Certified Information Systems Auditor)
  
  05/18/2026 - 05/22/2026
  
  CompTIA Network+
  
  05/18/2026 - 05/22/2026
  
  Certified Kubernetes Administrator (CKA)
  
  05/19/2026 - 05/22/2026
  
  AZ-104T00: Microsoft Azure Administrator
  
  06/10/2026 - 06/12/2026
  
  (AWS DevOps Certified Engineer- Professional DevOps Engineering on AWS)
- Maryland
  
  Columbia
  
  LEXX Live Certified Training Centers
  
  All locations listed are linked to pages a schedule of upcoming classes. To learn more about these training centers, contact our team at 301-258-8200 – Option 4.
Schedule
Training Solutions
Resources
- FREE: CMMC Executive Training Video
- Refer A Friend Get $100
About Us
- Who We Are
- Work With Us
- Partners
- Blog
Contact

Log in

ISACA CISM Assessment

CISM Practice Exam

Step 1 of 11

9%

This senior management branch ensures that all impacted stakeholders are involved in the information security process.*
- Board of directors
- Steering committee
- Executive management
- Incident response team

Which of the following is not a part or does not affect information security?*
- Print outs on a printing/copier machine
- Company's books of accounts
- None of the selection
- Clients' personal information

What should be determined in order to eradicate a particular incident?*
- Root cause
- Incident perpetrators
- Accountable personnel
- Intent of the attacker

Which of the following is NOT true?*
- Risk can be totally eradicated through resolving all vulnerabilities and setting up layered security defenses
- Every organization has a level of risk it will accept
- All of the answers are not true
- Risk is an inherent part of the business

Who must have an important involvement on the security program and should sign off on acceptable risk levels?*
- Information Security Management
- Incident Response Management
- IT Management
- Enterprise Management

What is the result when a specific threat tends to affect a large number of vulnerabilities which in effect constitutes to a significant impact?*
- Aggregate risk
- Company wide security issue
- Spike in risk criticality
- Over reaction of established security controls and countermeasures

What is considered as the basis for the Information Security Program action plan?*
- Program Objectives
- Program Framework
- Business Impact Analysis
- Gap analysis

What is the importance on management oversight in an Information Security Program?*
- Ensures that the program is well communicated throughout the company
- Ensures fulfillment of the requirements and consistency with strategic direction
- Ensures that the company is protected by the program
- Ensures that personnel adhere to the policies

Which of the following shows that senior management understands the importance of security governance into the overall enterprise governance framework?*
- Employees related to information security are well paid
- The company has a Chief Information Security Officer
- End users are scared to violate company security policies and standards
- Information security has its own section on the employee manual

How can the risk management process ensure that changing threats and vulnerabilities are addressed in a timely manner?*
- Consistent log monitoring and analysis
- Personnel should always be briefed regarding the established process
- Incorporating of a change management system to the process
- The process should be continuous and dynamic

Name*
First Last
Phone
Company Name
Confirm Your Email to See Your Score!*

10420 Little Patuxent Parkway
Suite 500
Columbia, MD 21044

About LEXX Live

About Us
Careers
Contact Us
Promotions
Course Recording Policy
508 Compliance
Refund & Cancellation Policy
Complaint Resolution Policy

Locations

All Locations
- Maryland

Services

Custom Training
Classroom Rentals
Government Training
Corporate Training
Training Management

Phoenix Technology Solutions, LLC © 2026 in partnership with Learning Exchange, Inc. All Rights Reserved. All trademarks and logos are the property of their respective owners.

Privacy Policy Terms of Use

We've taken the NEXXT step in live training. Join us!

Phoenix TS is now LEXX Live.
New brand, fresh design, same trusted learning partner.

Discover LEXX Live

Hubs

Coming Soon