Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Practice Questions and Exam Preparation

Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Questions & Answers

• Question 101:

  Which of the following cloud characteristics refers to resource utilization that can be optimized by leveraging charge-per-use capabilities?

  A. On demand self-service
  B. Elasticity
  C. Measured service
  D. Resource pooling
  C. Measured service

• Question 102:

  During which incident response phase is evidence obtained and preserved?

  A. Lessons learned
  B. Containment
  C. Eradication
  D. Recovery
  B. Containment

• Question 103:

  Which of the following BEST characterizes security mechanisms for mobile devices?

  A. Easy to control through mobile device management
  B. Comparatively weak relative to workstations
  C. Inadequate for organizational use
  D. Configurable and reliable across device types
  A. Easy to control through mobile device management

• Question 104:

  An IS auditor has learned that a cloud service provider has not adequately secured its application programming interface (API). Which of the following is MOST important for the auditor to consider in an assessment of the potential risk factors?

  A. Resource contention
  B. Identity spoofing and phishing
  C. Confidentiality, integrity, and availability
  D. Denial of service
  C. Confidentiality, integrity, and availability

• Question 105:

  The protection of information from unauthorized access or disclosure is known as:

  A. access control.
  B. cryptograph
  C. media protect on.
  D. confidentiality.
  D. confidentiality.

• Question 106:

  Which of the following BIST enables continuous identification and mitigation of security threats to an organization?

  A. demit/ and access management (1AM)
  B. Security operations center (SOC)
  C. Security training and awareness
  D. Security information and event management (SEM)
  B. Security operations center (SOC)

• Question 107:

  Which of the following provides additional protection other than encryption to messages transmitted using portable wireless devices?

  A. Endpoint protection
  B. Intrusion detection system (IDS)
  C. Virtual private network (VPN)
  D. Intrusion prevention system (IPS)
  C. Virtual private network (VPN)

• Question 108:

  What is the FIRST activity associated with a successful cyber attack?

  A. Exploitation
  B. Reconnaissance
  C. Maintaining a presence
  D. Creating attack tools
  B. Reconnaissance

• Question 109:

  What should be an IS auditor's GREATEST concern when an organization's virtual private network (VPN) is implemented on employees' personal mobile devices?

  A. Users may access services over the VPN that are network resource intensive.
  B. Users may store the data in plain text on their mobile devices.
  C. Users may access the corporate network from unauthorized devices.
  D. Users may access services not supported by the VPN.
  B. Users may store the data in plain text on their mobile devices.

• Question 110:

  Which of the following is the GREATEST advantage of using a virtual private network (VPN) over dedicated circuits and dial-in servers?

  A. It is more secure
  B. It is more reliable
  C. It is higher speed.
  D. It is more cost effective.
  D. It is more cost effective.