We're so confident of our products that we provide no hassle product exchange.
ISACA CISM日本語 Exam Overview:
| Certification Vendor: | ISACA |
|---|---|
| Exam Name: | Certified Information Security Manager (CISM) Certification Exam |
| Exam Number: | CISM |
| Real Exam Qty: | 150 |
| Certificate Validity Period: | 3 years (renewable via Continuing Professional Education - CPE) |
| Exam Duration: | 240 minutes |
| Related Certifications: | CGEIT CISA CISSP CRISC |
| Exam Price: | $575 (ISACA member) / $760 (non-member) |
| Available Languages: | Spanish, English, Japanese, Chinese (Simplified), Korean |
| Exam Format: | Computer-based testing, Multiple-choice |
| Passing Score: | 450 (scaled score out of 800) |
| Recommended Training: | ISACA CISM Review Manual ISACA CISM Online Review Courses |
| Exam Registration: | ISACA Exam Registration Portal ISACA CISM Certification Page |
| Sample Questions: | ISACA CISM日本語 Sample Questions |
| Exam Way: | Computer-based exam delivered at authorized testing centers or online proctored exam (where available) |
| Pre Condition: | ISACA recommends 5 years of work experience in information security management (waivers available for up to 2 years based on education or other certifications). |
| Official Syllabus URL: | https://www.isaca.org/credentialing/cism |
If you're wondering what kind of certificate is needed to become an efficient information security (IS)/IT professional, this is no other than the CISM certification from Isaca. It is well-acknowledged by companies around the world because of its strategic way of highlighting your abilities and developing your career. So, if you want to stay relevant despite the tough industry competition, getting this certification is a viable step.
Significant Tidbits about CISM Test
Firstly, this exam precisely measures your technical knowledge as you prepare to take on a managerial role. Since this is a step up from being a team player, you need to have the expertise in the four domains mentioned above. Before you face the responsibilities of becoming an ISACA certified specialist in the workplace, though, you must first deal with the pressure of finishing the 150 exam questions in 4 hours. In the global scene, there are more than 46,000 holders of this renowned certification so, with the right attitude and preparation, you can be the next in line for professional success.
Reference: https://www.isaca.org/credentialing/cism/cism-exam-content-outline
ISACA CISM日本語 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Information Security Program Development and Management | 33% | - Resource and program lifecycle management - Integrate security requirements into business processes - Develop and manage an information security program |
| Information Security Governance | 17% | - Align information security strategy with organizational goals - Establish and maintain an information security governance framework |
| Information Risk Management | 20% | - Identify and evaluate information security risks - Implement risk response strategies |
| Information Security Incident Management | 30% | - Detect, investigate, and manage security incidents - Post-incident analysis and improvement - Plan and establish incident response capabilities |
ISACA Certified Information Security Manager (CISM日本語版) Sample Questions:
組織のSaaS(Software as a Service)ベンダーで情報漏洩が発生した場合、情報セキュリティマネージャーが上級管理職に対して行うべき最善の推奨事項は次のうちどれですか？
- A. ベンダーリスク評価を更新する。
- B. ベンダーとの関係を解消する。
- C. ベンダーとの契約を再交渉する。
- D. 弁護士に相談する。
Correct Answer: A 🗳️
情報セキュリティマネージャーがセキュリティ目標とビジネス目標を整合させるための最善の行動方針は、次のうちどれですか？
- A. 事業影響分析(BIA)の実施
- B. 事業戦略の見直し
- C. 主要業績評価指標(KPI)の定義
- D. ステークホルダーとの積極的な関わり
Correct Answer: D 🗳️
Explanation: Only visible for TopExamCollection members. You can sign-up / login (it's free).
情報セキュリティマネージャーは、既存のサプライヤーが最近開発した生成AI技術を同じサービス範囲で導入する予定であることを知りました。3か月前にサプライヤーに対してリスク評価を実施しましたが、特筆すべき点はありませんでした。関連するリスクに対処するための最適な対策は、次のうちどれですか？
- A. 更新段階で契約書に補償条項を追加する
- B. リスクの変化を上級管理職に報告する
- C. AI技術のリスク評価が完了するまでサプライヤーの使用を一時停止する
- D. 前回のリスク評価の結果を確認する
Correct Answer: C 🗳️
Explanation: Only visible for TopExamCollection members. You can sign-up / login (it's free).
クラウドサービスプロバイダーの倒産によって発生する情報損失のリスクを最も効果的に軽減できるのは、次のうちどれですか？
- A. サイバーセキュリティ保険の購入
- B. 効果的なデータ損失防止(DLP)対策
- C. 監査権に関する契約条項
- D. データ返還に関する契約条項
Correct Answer: D 🗳️
Explanation: Only visible for TopExamCollection members. You can sign-up / login (it's free).
以下のうち、フィッシング対策キャンペーンが効果的であることを最もよく示しているのはどれですか？
- A. 発生した事件の件数が減少した
- B. 意識啓発セッションへのスタッフの出席率が向上した。
- C. 受信するフィッシングメールの数が減少
- D. フィッシング対策キャンペーンに関するフィードバックの改善
Correct Answer: A 🗳️
Explanation: Only visible for TopExamCollection members. You can sign-up / login (it's free).
Viewing page 1 out of 239 pages.
Viewing questions 1-5 out of 1193 questions.
By Kelly
