Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Practice Questions and Exam Preparation

Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Questions & Answers

• Question 1:

  The GREATEST benefit of using the CSA Cloud Controls Matrix is that it provides:

  A. a mapping to multiple control frameworks.
  B. severity rankings for identified deficiencies.
  C. templates of vetted cloud auditing programs.
  D. control specifications prioritized by importance.
  A. a mapping to multiple control frameworks.

• Question 2:

  Which of the following should an IS auditor do FIRST to ensure cyber security-related legal and regulatory requirements are followed by an organization?

  A. Determine if the cybersecurity program is mapped to relevant legal and regulatory requirements.
  B. Review the most recent legal and regulatory audit report conducted by an independent party.
  C. Determine if there is a formal process to review changes in legal and regulatory requirements. D Obtain a list of relevant legal and regulatory requirements.
  A. Determine if the cybersecurity program is mapped to relevant legal and regulatory requirements.

• Question 3:

  Which of the following is the MOST cost-effective technique for implementing network security for human resources (HR) desktops and internal laptop users in an organization?

  A. Fortified demilitarized zone
  B. Software defined perimeter
  C. Layer 3 virtual private network
  D. Virtual local area network
  D. Virtual local area network

• Question 4:

  A security setting to lock a profile after a certain number of unsuccessful login attempts would be MOST effective against which type of attack?

  A. Brute force
  B. Buffer overflow
  C. Backdoor
  D. Man-in-the-middle
  A. Brute force

• Question 5:

  In the context of network communications, what are the two types of attack vectors?

  A. Ingress and egress
  B. Physical theft and loss
  C. Insider and privilege misuse
  D. Malware and phishing
  A. Ingress and egress

• Question 6:

  Which of the following is the MAIN reason why domain name system (DNS) data exfiltration is a significant threat to mobile computing?

  A. It is simple to inject malformed code to compromise data processing.
  B. It is easy to execute command and control of the mobile target.
  C. It is difficult to distinguish malicious activity from legitimate traffic.
  D. There is relative anonymity of network connections outside the organization.
  C. It is difficult to distinguish malicious activity from legitimate traffic.

• Question 7:

  Which of the following is an objective of public key infrastructure (PKI)?

  A. Creating the private-public key pair for secure communications
  B. Independently authenticating the validity of the sender's public key
  C. Securely distributing secret keys to the communicating parties
  D. Approving the algorithm to be used during data transmission
  B. Independently authenticating the validity of the sender's public key

• Question 8:

  What is the PRIMARY purpose of creating a security architecture?

  A. To visually show gaps in information security controls
  B. To create a long-term information security strategy
  C. To map out how security controls interact with an organization's systems
  D. To provide senior management a measure of information security maturity
  B. To create a long-term information security strategy

• Question 9:

  In public key cryptography, digital signatures are primarily used to;

  A. ensure message integrity.
  B. ensure message accuracy.
  C. prove sender authenticity.
  D. maintain confidentiality.
  C. prove sender authenticity.

• Question 10:

  Which of the following is a passive activity that could be used by an attacker during reconnaissance to gather information about an organization?

  A. Using open source discovery
  B. Scanning the network perimeter
  C. Social engineering
  D. Crafting counterfeit websites
  A. Using open source discovery