
Certified Information Security Manager quiz
3 questions. No signup. Your move.
What term describes a system flaw or weakness that can be exploited?
Now make it a duel.
Play more questions on Certified Information Security Manager in LearnClash. Challenge friends in a new quiz duel.
Play more in the appA tap copies this page’s link so the app can pick up where you left off.
That was every question in this preview. Pick another topic or keep going in the app.
A new quiz every day: Today’s quiz
The video couldn’t load. You can watch it on YouTube.
Choose a topic, answer questions and challenge a friend in LearnClash.
Watch on YouTubeA tap copies this page’s link so the app can pick up where you left off.
More questions about Certified Information Security Manager
These visible examples show the question style. LearnClash turns the full topic into ranked duels and spaced repetition.
-
Which risk treatment involves buying an insurance policy?
Answer: Risk transfer
Why: Insurance covers the financial loss, yet accountability stays with the organisation, and no premium buys back a damaged reputation.
-
Which high-level document defines an organization's security goals?
Answer: Security policy
Why: Below it the layers differ: standards are mandatory, baselines pin down platform specific settings, and guidelines stay optional advice.
-
What is the minimum annual CPE hour requirement to maintain CISM?
Answer: 20 hours
Why: The yearly floor is only half the rule: holders must also log 120 CPE hours across each three year reporting period.
-
Which organization issues the CISM certification to security professionals?
Answer: ISACA
Why: ISACA was incorporated in 1969 as the EDP Auditors Association and now reports more than 48,000 holders of this credential.
-
Who bears the ultimate responsibility for security governance?
Answer: Board of directors
Why: Security tasks can be handed down the chain, yet legal responsibility runs back up it by default and settles at the very top.
-
Which metric measures the effectiveness of a security control?
Answer: Key performance indicator
Why: A key risk indicator, by contrast, looks ahead at rising exposure, while a KPI reports how a control has performed so far.