Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Practice Questions and Exam Preparation

Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Questions & Answers

• Question 61:

  Which of the following is a limitation of intrusion detection systems (IDS)?

  A. Limited evidence on intrusive activity
  B. Application-level vulnerabilities
  C. Lack of Interface with system tools
  D. Weak passwords for the administration console
  B. Application-level vulnerabilities

• Question 62:

  Which of the following backup procedure would only copy files that have changed since the last backup was made?

  A. Incremental backup
  B. Daily backup
  C. Differential backup
  D. Full backup
  A. Incremental backup

• Question 63:

  A data loss prevention (DLP) program helps protect an organization from:

  A. crypto ransomware infection.
  B. unauthorized access to servers and applications.
  C. unauthorized data modification.
  D. exfiltration of sensitive data.
  D. exfiltration of sensitive data.

• Question 64:

  Which of the following is EASIEST for a malicious attacker to detect?

  A. Use of insufficient cryptography
  B. Insecure storage of sensitive data
  C. Susceptibility to reverse engineering
  D. Ability to tamper with mobile code
  C. Susceptibility to reverse engineering

• Question 65:

  When passwords are tied into key generation, the strength of the encryption algorithm is:

  A. voided.
  B. increased.
  C. diminished.
  D. maintained.
  D. maintained.

• Question 66:

  Which process converts extracted information to a format understood by investigators?

  A. Reporting
  B. Ingestion
  C. imaging
  D. Filtering
  A. Reporting

• Question 67:

  Which of the following is used to help identify the most appropriate controls to meet an organization's specific security requirements?

  A. Risk assessment
  B. Maturity model
  C. Contingency planning
  D. Security assessment
  A. Risk assessment

• Question 68:

  Cyber threat intelligence aims to research and analyze trends and technical developments in which of the following areas?

  A. Industry-specific security regulator
  B. Cybercrime, hacktism. and espionage
  C. Cybersecurity risk scenarios
  D. Cybersecurity operations management
  B. Cybercrime, hacktism. and espionage

• Question 69:

  Which of the following would allow an IS auditor to obtain a bit-for-bit copy of data?

  A. Ingestion
  B. Extraction
  C. Imaging
  D. Filtering
  C. Imaging

• Question 70:

  Which phase typically occurs before containment of an incident?

  A. Identification
  B. Eradication
  C. Preservation
  D. Recovery
  A. Identification