ISACA Cybersecurity Audit Certificate Practice Exams
Last updated on Oct 23,2026- Exam Code: Cybersecurity Audit Certificate
- Exam Name: ISACA Cybersecurity Audit Certificate Exam
- Certification Provider: ISACA
- Latest update: Oct 23,2026
Which of the following is MOST effective in detecting unknown malware?
- A . Host-based firewall
- B . Signature-based anti-malware
- C . Regular patching
- D . Heuristic-based anti-malware
Which of the following is MOST likely to result in unidentified cybersecurity risks?
- A . Lack of cybersecurity procedures and guidelines
- B . Failure to identify and formalize roles and responsibilities for cybersecurity
- C . Lack of protocols for disclosure of serious cybersecurity breaches to authorities
- D . Failure to establish adequate recovery processes for cybersecurity events
Which of the following mobile computing trends should cause the GREATEST concern for an organization that needs to protect sensitive organizational data?
- A . Fluctuating size of form factors for mobile devices
- B . Increasing amount of storage space available on mobile devices
- C . Expanding availability of mobile network coverage
- D . Growing consumer demand for advanced mobile technologies
In cloud computing, which type of hosting is MOST appropriate for a large organization that wants greater control over the environment?
- A . Private hosting
- B . Public hosting
- C . Shared hosting
- D . Hybrid hosting
Which of the following describes Secure Hypertext Transfer Protocol (HTTPS)?
- A . HTTP protected by symmetric encryption
- B . HTTP with an encrypted session via Transport Layer Security
- C . HTTP protected by asymmetric encryption
- D . HTTP with an encrypted session via MD5 or RC4 protocols
Within the NIST core cybersecurity framework, which function is associated with using organizational understanding to minimize risk to systems, assets, and data?
- A . Detect
- B . Identify
- C . Recover
- D . Respond
Which of the following contains the essential elements of effective processes and describes an improvement path considering quality and effectiveness?
- A . Capability maturity model integration
- B . Balanced scorecard
- C . 60 270042009
- D . COBIT 5
During which incident response phase is the incident management team activated?
- A . Recovery
- B . Containment
- C . Eradication
- D . Identification
The risk of an evil twin attack on mobile devices is PRIMARILY due to:
- A . tokens stored as plain text in many mobile device applications.
- B . use of data transmission that is not always encrypted.
- C . generic names that mobile devices will accept without verification.
- D . weak authentication protocols in wireless networks.
Which of the following BEST facilitates the development of metrics for repotting to senior management on vulnerability management efforts?
- A . Reviewing business impact analysis (BIA) results
- B . Regularly benchmarking the number of new vulnerabilities identified with industry peers
- C . Tracking vulnerabilities and the remediation efforts to mitigate them
- D . Monitoring the frequency of vulnerability assessments using automated scans