Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Practice Questions and Exam Preparation

Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Questions & Answers

• Question 41:

  Which of the following presents the GREATEST risk to corporate data pertaining to mobile device usage?

  A. The mobile device may be subject to remote wipe.
  B. End users are not trained in mobile device management.
  C. The mobile device is not obtained through corporate provisioning.
  D. Privileged access is replicated to the user's own mobile device.
  D. Privileged access is replicated to the user's own mobile device.

• Question 42:

  What is the MAIN consideration when storing backup files?

  A. Utilizing solid slate device (SSDJ media for quick recovery
  B. Storing backup files on public cloud storage
  C. Protecting the off-site data backup copies from unauthorized access
  D. Storing copies on-site for ease of access during incident response
  C. Protecting the off-site data backup copies from unauthorized access

• Question 43:

  Which of the following is a computer-software vulnerability that is unknown to those who would be interested in mitigating the vulnerability?

  A. Cross-site scripting vulnerability
  B. SQL injection vulnerability
  C. Memory leakage vulnerability
  D. Zero-day vulnerability
  D. Zero-day vulnerability

• Question 44:

  Using digital evidence to provide validation that an attack has actually occurred is an example of;

  A. computer forensic
  B. extraction.
  C. identification.
  D. data acquisition.
  A. computer forensic

• Question 45:

  What is the FIRST phase of the ISACA framework for auditors reviewing cryptographic environments?

  A. Evaluation of implementation details
  B. Hands-on testing
  C. Risk-based shakeout
  D. Inventory and discovery
  D. Inventory and discovery

• Question 46:

  Which of the following is the MAIN purpose of system hardening?

  A. To enforce the principle of least privilege
  B. To create a security-conscious environment
  C. To reduce vulnerability by limiting attack vectors
  D. To protect the system from all possible threats
  C. To reduce vulnerability by limiting attack vectors

• Question 47:

  Which of the following is MOST critical to guiding and managing security activities throughout an organization to ensure objectives are met?

  A. Allocating a significant amount of budget to security investments
  B. Adopting industry security standards and frameworks
  C. Establishing metrics to measure and monitor security performance
  D. Conducting annual security awareness training for all employees
  C. Establishing metrics to measure and monitor security performance

• Question 48:

  The "recover" function of the NIST cybersecurity framework is concerned with:

  A. allocating costs incurred as part of the implementation of cybersecurity measures.
  B. taking appropriate action to contain and eradicate a security incident.
  C. identifying critical data to be recovered in case of a security incident.
  D. planning for resilience and timely repair of compromised capabilities and services.
  D. planning for resilience and timely repair of compromised capabilities and services.

• Question 49:

  Which of the following provides the GREATEST assurance that data can be recovered and restored in a timely manner in the event of data loss?

  A. Backups of information are regularly tested.
  B. Data backups are available onsite for recovery.
  C. The recovery plan is executed during or after an event
  D. full data backup is performed daily.
  A. Backups of information are regularly tested.

• Question 50:

  Which intrusion detection system component is responsible for collecting data in the form of network packets, log files, or system call traces?

  A. Packet filters
  B. Analyzers
  C. Administration modules
  D. Sensors
  D. Sensors