CYBERSECURITY-AUDIT-CERTIFICATE Real Exam Questions and Verified

Question 1 Single choice

Which of the following should an IS auditor do FIRST to ensure cyber security-related legal and regulatory requirements are followed by an organization?

A
Determine if the cybersecurity program is mapped to relevant legal and regulatory requirements.
B
Review the most recent legal and regulatory audit report conducted by an independent party.
C
Determine if there is a formal process to review changes in legal and regulatory requirements.
D Obtain a list of relevant legal and regulatory requirements.

Show answer and explanation

Correct answer: A

Question 2 Single choice

What would be an IS auditor's BEST response to an IT managers statement that the risk associated with the use of mobile devices in an organizational setting is the same as for any other device?

A
Replication of privileged access and the greater likelihood of physical loss increases risk levels.
B
The risk associated with mobile devices is less than that of other devices and systems.
C
The risk associated with mobile devices cannot be mitigated with similar controls for workstations.
D
The ability to wipe mobile devices and disable connectivity adequately mitigates additional

Show answer and explanation

Correct answer: A

Question 3 Single choice

Which of the following is an example of an application security control?

A
Secure coding
B
User security awareness training
C
Security operations center
D
Intrusion detection

Show answer and explanation

Correct answer: A

Question 4 Single choice

Which of the following is the MOST important step to determine the risks posed to an organization by social media?

A
Review costs related to the organization's social media outages.
B
Review cybersecurity insurance requirements for the organization s social media.
C
Review the disaster recovery strategy for the organization's social media.
D
Review access control processes for the organization's social media accounts.

Show answer and explanation

Correct answer: D

Question 5 Single choice

A healthcare organization recently acquired another firm that outsources its patient information processing to a third-party Software as a Service (SaaS) provider.
From a regulatory perspective, which of the following is MOST important for the healthcare organization to determine?

A
Cybersecurity risk assessment methodology
B
Encryption algorithms used to encrypt the data
C
Incident escalation procedures
D
Physical location of the data

Show answer and explanation

Correct answer: C

Question 6 Single choice

Which of the following is the SLOWEST method of restoring data from backup media?

A
Monthly backup
B
Full backup
C
Differential Backup
D
Incremental backup

Show answer and explanation

Correct answer: D

Question 7 Single choice

At which layer in the open systems interconnection (OSI) model does SSH operate?

A
Presentation
B
Session
C
Application
D
Network

Show answer and explanation

Correct answer: C

Question 8 Single choice

One way to control the integrity of digital assets is through the use of:

A
policies.
B
hashing.
C
caching.
D
frameworks.

Show answer and explanation

Correct answer: B

Question 9 Single choice

When passwords are tied into key generation, the strength of the encryption algorithm is:

A
voided.
B
increased.
C
diminished.
D
maintained.

Show answer and explanation

Correct answer: D

Question 10 Single choice

The GREATEST benefit of using the CSA Cloud Controls Matrix is that it provides:

A
a mapping to multiple control frameworks.
B
severity rankings for identified deficiencies.
C
templates of vetted cloud auditing programs.
D
control specifications prioritized by importance.

Show answer and explanation

Correct answer: A