Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Practice Questions and Exam Preparation

Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Questions & Answers

• Question 21:

  Which of the following BEST facilitates the development of metrics for repotting to senior management on vulnerability management efforts?

  A. Reviewing business impact analysis (BIA) results
  B. Regularly benchmarking the number of new vulnerabilities identified with industry peers
  C. Tracking vulnerabilities and the remediation efforts to mitigate them
  D. Monitoring the frequency of vulnerability assessments using automated scans
  C. Tracking vulnerabilities and the remediation efforts to mitigate them

• Question 22:

  Which of the following are politically motivated hackers who target specific individuals or organizations to achieve various ideological ends?

  A. Malware researchers
  B. Hacktivists
  C. Cybercriminals
  D. Script kiddies
  B. Hacktivists

• Question 23:

  Which of the following is a weakness associated with the use of symmetric, private keys in wired equivalent privacy (WEP) encryption?

  A. Keys change periodically on networks.
  B. Keys are stored in the cloud.
  C. Keys remain unchanged on networks for extended times.
  D. Keys are not retrievable.
  C. Keys remain unchanged on networks for extended times.

• Question 24:

  Which of the following is a team created PRIMARILY to improve the security posture of an organization?

  A. Computer emergency response team (CERT)
  B. Security operations center (SOC) team
  C. Disaster recovery team
  D. Risk management team
  B. Security operations center (SOC) team

• Question 25:

  Which type of tools look for anomalies in user behavior?

  A. Rootkit detection tools
  B. Trend/variance-detection tools
  C. Audit reduction tools
  D. Attack-signature-detection tools
  B. Trend/variance-detection tools

• Question 26:

  A healthcare organization recently acquired another firm that outsources its patient information processing to a third-party Software as a Service (SaaS) provider. From a regulatory perspective, which of the following is MOST important for the healthcare organization to determine?

  A. Cybersecurity risk assessment methodology
  B. Encryption algorithms used to encrypt the data
  C. Incident escalation procedures
  D. Physical location of the data
  C. Incident escalation procedures

• Question 27:

  Which of the following is MOST important to verify when reviewing the effectiveness of an organization's identity management program?

  A. Processes are approved by the process owner.
  B. Processes are aligned with industry best practices.
  C. Processes are centralized and standardized.
  D. Processes are updated and documented annually.
  B. Processes are aligned with industry best practices.

• Question 28:

  Which of the following backup methods takes the MOST time for restoration of data?

  A. Incremental backup
  B. Offsite backup
  C. Full backup
  D. Differential backup
  A. Incremental backup

• Question 29:

  What would be an IS auditor's BEST response to an IT managers statement that the risk associated with the use of mobile devices in an organizational setting is the same as for any other device?

  A. Replication of privileged access and the greater likelihood of physical loss increases risk levels.
  B. The risk associated with mobile devices is less than that of other devices and systems.
  C. The risk associated with mobile devices cannot be mitigated with similar controls for workstations.
  D. The ability to wipe mobile devices and disable connectivity adequately mitigates additional
  A. Replication of privileged access and the greater likelihood of physical loss increases risk levels.

• Question 30:

  Why are security frameworks an important part of a cybersecurity strategy?

  A. They serve to integrate and guide activities.
  B. They contain the necessary policies and standards.
  C. They provide protection to the organization.
  D. They are required for regulatory compliance.
  A. They serve to integrate and guide activities.