Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Practice Questions and Exam Preparation

Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Questions & Answers

• Question 121:

  The integrity of digital assets can be controlled by:

  A. read access restrictions, database normalization, and patching.
  B. redundancy, backups, and business continuity management.
  C. access controls, encryption, and digital signatures.
  D. user awareness training and related end-user testing.
  C. access controls, encryption, and digital signatures.

• Question 122:

  One way to control the integrity of digital assets is through the use of:

  A. policies.
  B. frameworks.
  C. caching
  D. hashing.
  D. hashing.

• Question 123:

  When reviewing user management roles, which of the following groups presents the GREATEST risk based on their permissions?

  A. Privileged users
  B. Database administrators
  C. Terminated employees
  D. Contractors
  A. Privileged users

• Question 124:

  Which of the following is commonly referred to as a Wi-Fi hot-spot?

  A. Local area network (LAN)
  B. Wireless local area network (WLAN)
  C. Wireless personal area network (WPAN)
  D. Wide area network (WAN)
  B. Wireless local area network (WLAN)

• Question 125:

  Which of the following defines the minimum acceptable rules for policy compliance?

  A. Baselines
  B. Guidelines
  C. Standards
  D. Frameworks
  C. Standards

• Question 126:

  Which of the following is the MOST relevant type of audit to conduct when fraud has been detected following an incident?

  A. Cybersecurity audit
  B. Financial audit
  C. Forensics audit
  D. Cyber insurance audit
  C. Forensics audit

• Question 127:

  Which of the following would provide the BEST basis for allocating proportional protection activities when comprehensive classification is not feasible?

  A. Single classification level allocation
  B. Business process re-engineering
  C. Business dependency assessment
  D. Comprehensive cyber insurance procurement
  C. Business dependency assessment

• Question 128:

  The risk of an evil twin attack on mobile devices is PRIMARILY due to:

  A. tokens stored as plain text in many mobile device applications.
  B. use of data transmission that is not always encrypted.
  C. generic names that mobile devices will accept without verification.
  D. weak authentication protocols in wireless networks.
  C. generic names that mobile devices will accept without verification.

• Question 129:

  What is the MAIN objective of an intrusion detection system (IDS) policy?

  A. To define the assets covered by intrusion detection systems (IDSs)
  B. To establish the criteria and reporting requirements associated with intrusion events
  C. To define the response time required of security personnel when an intrusion is detected
  D. To establish the actions to be taken by security personnel in the event an intruder is detected
  B. To establish the criteria and reporting requirements associated with intrusion events

• Question 130:

  What is the FIRST phase of the ISACA framework for auditors reviewing cryptographic environments?

  A. Evaluation of implementation details
  B. Hands-on testing
  C. Hand-based shakeout
  D. Inventory and discovery
  D. Inventory and discovery