Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Practice Questions and Exam Preparation

Isaca CYBERSECURITY-AUDIT-CERTIFICATE Online Questions & Answers

• Question 81:

  Using a data loss prevention (DLP) solution to monitor data saved to a USB memory device is an example of managing:

  A. data in use.
  B. data redundancy.
  C. data availability.
  D. data at rest.
  D. data at rest.

• Question 82:

  Which of the following is an important reason for tracing the access and origin of an intrusion once it has been detected?

  A. To create appropriate security awareness content to avoid recurrence
  B. To determine the impact of the intrusion event
  C. To perform a root cause analysis of the intrusion event
  D. To determine and correct any system weaknesses
  C. To perform a root cause analysis of the intrusion event

• Question 83:

  Which of the following BEST helps IT administrators to ensure servers have no unnecessary features installed?

  A. Comparison against information security policy
  B. Review of vulnerability scanning results
  C. Comparison against baseline standards
  D. Verification of user acceptance testing
  C. Comparison against baseline standards

• Question 84:

  Which of the following features of an anti-malware application is MOST helpful in protecting an organization from the potential of infected computers using a virtual private network (VPN)?

  A. Data heuristics
  B. On-demand scanning
  C. Endpoint remote control
  D. Data packet analysis
  D. Data packet analysis

• Question 85:

  Within the NIST core cybersecurity framework, which function is associated with using organizational understanding to minimize risk to systems, assets, and data?

  A. Detect
  B. Identify
  C. Recover
  D. Respond
  B. Identify

• Question 86:

  While risk is measured by potential activity, which of the following describes the actual occurrence of a threat?

  A. Attack
  B. Payload
  C. Vulnerability
  D. Target
  A. Attack

• Question 87:

  Which of the following controls BEST ensures a user creates a complex password?

  A. Operating system rules
  B. Multi-factor authentication
  C. Information security awareness
  D. Biometrics
  A. Operating system rules

• Question 88:

  Which of the following is an attack attribute of an advanced persistent threat (APT) that is designed to remove data from systems and networks?

  A. Adversarial threat event
  B. Exfiltration attack vector
  C. Infiltration attack vector
  D. Kill chain modeling
  B. Exfiltration attack vector

• Question 89:

  Which of the following is the MOST important consideration to help mitigate cybersecurity risks related to outsourcing a key business function?

  A. Monitoring service provider performance
  B. Prohibiting the service provider from sub-contracting
  C. Requiring the service provider to purchase insurance
  D. Including a cybersecurity clause in the contract
  D. Including a cybersecurity clause in the contract

• Question 90:

  Security awareness training is MOST effective against which type of threat?

  A. Command injection
  B. Denial of service
  C. Social engineering
  D. Social injection
  C. Social engineering