Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Practice Questions and Exam Preparation

Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Questions & Answers

• Question 11:

  When performing a teaming exercise, which team works to integrate the defensive tactics and controls from the defending team with the threats and vulnerabilities found by the attacking team?

  A. Yellow team
  B. Red team
  C. Purple team
  D. Black team
  C. Purple team

• Question 12:

  Which of the following is a MAIN benefit of using Security as a Service (SECaaS) providers?

  A. Significant investments and specialized security skills are not required.
  B. Enterprises can use the latest technologies to counter threats that are constantly evolving.
  C. SECaaS providers are compliant with specific security requirements and new regulations.
  D. Available security services from providers are affordable to enterprises of all sizes.
  A. Significant investments and specialized security skills are not required.

• Question 13:

  Which of the following security mechanisms provides the BEST protection of data when a computer is stolen?

  A. Password-based access control
  B. Digital signature
  C. Secret key encryption
  D. Cryptographic hash function
  C. Secret key encryption

• Question 14:

  Which of the following is the MOST important step to determine the risks posed to an organization by social media?

  A. Review costs related to the organization's social media outages.
  B. Review cybersecurity insurance requirements for the organization s social media.
  C. Review the disaster recovery strategy for the organization's social media.
  D. Review access control processes for the organization's social media accounts.
  D. Review access control processes for the organization's social media accounts.

• Question 15:

  Which of the following presents the GREATEST challenge to information risk management when outsourcing IT function to a third party?

  A. It is difficult to know the applicable regulatory requirements when data is located on another country.
  B. Providers may be reluctant to share technical delays on the extent of their information protection mechanisms.
  C. Providers may be restricted from providing detailed ^formation on their employees.
  D. It is difficult to determine vendor financial viability to assess their potential inability to meet contract requirements.
  B. Providers may be reluctant to share technical delays on the extent of their information protection mechanisms.

• Question 16:

  Which of the following describes computing capabilities that are available over the network and can be accessed by diverse client platforms?

  A. Resource pooling
  B. Shared network access
  C. Private network access
  D. Broad network access
  D. Broad network access

• Question 17:

  An information security procedure indicates a requirement to sandbox emails. What does this requirement mean?

  A. Ensure the emails are encrypted and provide nonrepudiation.
  B. Provide a backup of emails in the event of a disaster
  C. isolate the emails and test for malicious content
  D. Guarantee rapid email delivery through firewalls.
  C. isolate the emails and test for malicious content

• Question 18:

  Which of the following costs are typically covered by cybersecurity insurance?

  A. Forensic investigation
  B. Threat intelligence feed
  C. SIEM implementation
  D. Reputational loss
  A. Forensic investigation

• Question 19:

  Which of the following is the GREATEST drawback when using the AICPA/CICA Trust Sen/ices to evaluate a cloud service provider?

  A. Incompatibility with cloud service business model
  B. Lack of specificity m the principles
  C. Omission of confidentiality in the criteria
  D. Inability to issue SOC 2 or SOC 3 reports
  B. Lack of specificity m the principles

• Question 20:

  Which of the following provides an early signal of increasing risk exposures for an organization?

  A. Key performance indicators
  B. Risk management policies and procedures
  C. Key risk indicators
  D. Capability maturity model integration
  C. Key risk indicators