Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Practice Questions and Exam Preparation

Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Questions & Answers

• Question 111:

  Which of the following is a feature of an intrusion detection system (IDS)?

  A. Intrusion prevention
  B. Automated response
  C. Interface with firewalls
  D. Back doors into applications
  B. Automated response

• Question 112:

  The GREATEST advantage of using a common vulnerability scoring system is that it helps with:

  A. risk aggregation.
  B. risk prioritization.
  C. risk elimination.
  D. risk quantification
  B. risk prioritization.

• Question 113:

  Which of the following features of continuous auditing provides the BEST level of assurance over traditional sampling?

  A. Reports can be generated more frequently for management.
  B. Automated tools provide more reliability than an auditors personal judgment
  C. Voluminous dale can be analyzed at a high speed to show relevant patterns.
  D. Continuous auditing tools are less complex for auditors to manage.
  C. Voluminous dale can be analyzed at a high speed to show relevant patterns.

• Question 114:

  Which of the following is the BEST indication that an organization's vulnerability management process is operating effectively?

  A. Remediation efforts are communicated to management
  B. The vulnerability program is formally approved
  C. The vulnerability program is reviewed annually.
  D. Remediation efforts are prioritized.
  D. Remediation efforts are prioritized.

• Question 115:

  Which of the following is a client-server program that opens a secure, encrypted command- line shell session from the Internet for remote logon?

  A. VPN
  B. IPsec
  C. SSH
  D. SFTP
  C. SSH

• Question 116:

  Which of the following is the MOST serious consequence of mobile device loss or theft?

  A. Cost of purchasing replacement devices
  B. Physical damage to devices
  C. Installation of unauthorized applications
  D. Compromise of transient data
  D. Compromise of transient data

• Question 117:

  The second line of defense in cybersecurity includes:

  A. conducting organization-wide control self-assessments.
  B. risk management monitoring, and measurement of controls.
  C. separate reporting to the audit committee within the organization.
  D. performing attack and breach penetration testing.
  B. risk management monitoring, and measurement of controls.

• Question 118:

  Which of the following is the SLOWEST method of restoring data from backup media?

  A. Monthly backup
  B. Full backup
  C. Differential Backup
  D. Incremental backup
  D. Incremental backup

• Question 119:

  Which of the following is the MOST important consideration when choosing between different types of cloud services?

  A. Emerging risk and infrastructure scalability
  B. Security features available on demand
  C. Overall risk and benefits
  D. Reputation of the cloud providers
  C. Overall risk and benefits

• Question 120:

  Which of the following is the PRIMARY goal of implementing a change management process?

  A. To ensure changes are communicated to the process owners prior to going live
  B. To minimize disruptions to the business from system changes
  C. To ensure that changes made to a system are performed on schedule
  D. To validate that changes to the system provide the expected return on investment
  B. To minimize disruptions to the business from system changes