Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Practice Questions and Exam Preparation

Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Questions & Answers

• Question 31:

  What is the FIRST phase of the ISACA framework for auditors reviewing cryptographic environments?

  A. Evaluation of implementation details
  B. Hands-on testing
  C. Risk-based shakeout
  D. Inventory and discovery
  D. Inventory and discovery

• Question 32:

  Which of the following describes Secure Hypertext Transfer Protocol (HTTPS)?

  A. HTTP protected by symmetric encryption
  B. HTTP with an encrypted session via Transport Layer Security
  C. HTTP protected by asymmetric encryption
  D. HTTP with an encrypted session via MD5 or RC4 protocols
  B. HTTP with an encrypted session via Transport Layer Security

• Question 33:

  he MOST significant limitation of vulnerability scanning is the fact that modern scanners only detect:

  A. common vulnerabilities.
  B. unknown vulnerabilities.
  C. known vulnerabilities.
  D. zero-day vulnerabilities.
  C. known vulnerabilities.

• Question 34:

  Which of the following continuous auditing tools scans and flags business transactions according to predefined criteria on a real-time basis?

  A. Vulnerability scanner
  B. Automated governance, risk, and compliance (GRC) tool
  C. Intrusion detection system (IDS)
  D. Real-time antivirus protection tool
  B. Automated governance, risk, and compliance (GRC) tool

• Question 35:

  A cybersecurity audit reveals that an organization's risk management function has the right to overrule business management decisions. Would the IS auditor find this arrangement acceptable?

  A. No, because the risk management function should be the body that makes risk-related decisions for the organization.
  B. Yes, because the second line of defense is generally on a higher organizational level than the first line.
  C. No, because the risk management's oversight function would potentially lose its ability to objectively monitor and measure the business.
  D. Yes, because this arrangement ensures adequate oversight and enforcement of risk management in the organization.
  C. No, because the risk management's oversight function would potentially lose its ability to objectively monitor and measure the business.

• Question 36:

  Which of the following includes step-by-step directions for accomplishing a specific task?

  A. Baselines
  B. Guidelines
  C. Procedures
  D. Policies
  C. Procedures

• Question 37:

  Strong data loss prevention (DLP) solutions help protect information in which of the following states?

  A. At rest, in transit and in use
  B. Operating system application and database levels
  C. Public restricted, and confidential
  D. Data sent, data received, and data deleted
  A. At rest, in transit and in use

• Question 38:

  In cloud computing, which type of hosting is MOST appropriate for a large organization that wants greater control over the environment?

  A. Private hosting
  B. Public hosting
  C. Shared hosting
  D. Hybrid hosting
  A. Private hosting

• Question 39:

  Which of the following mobile computing trends should cause the GREATEST concern for an organization that needs to protect sensitive organizational data?

  A. Fluctuating size of form factors for mobile devices
  B. Increasing amount of storage space available on mobile devices
  C. Expanding availability of mobile network coverage
  D. Growing consumer demand for advanced mobile technologies
  B. Increasing amount of storage space available on mobile devices

• Question 40:

  A cloud service provider is used to perform analytics on an organization's sensitive data. A data leakage incident occurs in the service providers network from a regulatory perspective, who is responsible for the data breach?

  A. The service provider
  B. Dependent upon the nature of breath
  C. Dependent upon specific regulatory requirements
  D. The organization
  D. The organization