ISACA Cybersecurity Audit Certificate Practice Exams
Last updated on Oct 23,2026- Exam Code: Cybersecurity Audit Certificate
- Exam Name: ISACA Cybersecurity Audit Certificate Exam
- Certification Provider: ISACA
- Latest update: Oct 23,2026
Which of the following controls BEST ensures a user creates a complex password?
- A . Operating system rules
- B . Multi-factor authentication
- C . Information security awareness
- D . Biometrics
Which of the following is the MAIN purpose of system hardening?
- A . To enforce the principle of least privilege
- B . To create a security-conscious environment
- C . To reduce vulnerability by limiting attack vectors
- D . To protect the system from all possible threats
What is the MAIN objective of an intrusion detection system (IDS) policy?
- A . To define the assets covered by intrusion detection systems (IDSs)
- B . To establish the criteria and reporting requirements associated with intrusion events
- C . To define the response time required of security personnel when an intrusion is detected
- D . To establish the actions to be taken by security personnel in the event an intruder is detected
Which of the following is the PRIMARY goal of implementing a change management process?
- A . To ensure changes are communicated to the process owners prior to going live
- B . To minimize disruptions to the business from system changes
- C . To ensure that changes made to a system are performed on schedule
- D . To validate that changes to the system provide the expected return on investment
A security setting to lock a profile after a certain number of unsuccessful login attempts would be MOST effective against which type of attack?
- A . Brute force
- B . Buffer overflow
- C . Backdoor
- D . Man-in-the-middle
Which of the following backup procedures would only copy files that have changed since the last backup was made?
- A . Incremental backup
- B . Differential backup
- C . Daily backup
- D . Full backup
Which of the following controls BEST prevents users from intentionally or unintentionally accessing data they are not authorized to view?
- A . Least privilege
- B . Information security policy
- C . Encryption
- D . Passwords
Which of the following describes specific, mandatory controls or rules to support and comply with a policy?
- A . Frameworks
- B . Guidelines
- C . Basedine
- D . Standards
The integrity of digital assets can be controlled by:
- A . read access restrictions, database normalization, and patching.
- B . redundancy, backups, and business continuity management.
- C . access controls, encryption, and digital signatures.
- D . user awareness training and related end-user testing.
Which of the following would allow an IS auditor to obtain a bit-for-bit copy of data?
- A . Ingestion
- B . Extraction
- C . Imaging
- D . Filtering