ISACA Cybersecurity Audit Certificate Practice Exams
Last updated on Oct 24,2026- Exam Code: Cybersecurity Audit Certificate
- Exam Name: ISACA Cybersecurity Audit Certificate Exam
- Certification Provider: ISACA
- Latest update: Oct 24,2026
The second line of defense in cybersecurity includes:
- A . conducting organization-wide control self-assessments.
- B . risk management monitoring, and measurement of controls.
- C . separate reporting to the audit committee within the organization.
- D . performing attack and breach penetration testing.
Which of the following includes step-by-step directions for accomplishing a specific task?
- A . Baselines
- B . Guidelines
- C . Procedures
- D . Policies
Which of the following defines the minimum acceptable rules for policy compliance?
- A . Baselines
- B . Guidelines
- C . Standards
- D . Frameworks
Which of the following features of an anti-malware application is MOST helpful in protecting an organization from the potential of infected computers using a virtual private network (VPN)?
- A . Data heuristics
- B . On-demand scanning
- C . Endpoint remote control
- D . Data packet analysis
An insecure wireless connection may expose users to which of the following?
- A . Tailgating
- B . Shoulder surfing
- C . Eavesdropping
- D . Distributed denial of service
Which of the following is the BEST indication that an organization’s vulnerability management process is operating effectively?
- A . Remediation efforts are communicated to management
- B . The vulnerability program is formally approved
- C . The vulnerability program is reviewed annually.
- D . Remediation efforts are prioritized.
Which of the following is commonly referred to as a Wi-Fi hotspot?
- A . Local area network (LAN)
- B . Wireless local area network (WLAN)
- C . Wireless personal area network (WPAN)
- D . Wide area network (WAN)
An organization’s responsibility to protect its assets and operations, including IT infrastructure and information, is referred to as:
- A . corporate risk management and assurance strategy.
- B . cybersecurity goals, objectives, and mission.
- C . organizational cybersecurity policies and procedures.
- D . governance, risk management, and compliance.
Which of the following features of continuous auditing provides the BEST level of assurance over
traditional sampling?
- A . Reports can be generated more frequently for management.
- B . Automated tools provide more reliability than an auditors personal judgment
- C . Voluminous dale can be analyzed at a high speed to show relevant patterns.
- D . Continuous auditing tools are less complex for auditors to manage.
Which of the following is an attack attribute of an advanced persistent threat (APT) that is designed to remove data from systems and networks?
- A . Adversarial threat event
- B . Exfiltration attack vector
- C . Infiltration attack vector
- D . Kill chain modeling
B
Explanation:
An example of an attack attribute of an advanced persistent threat (APT) that is designed to remove data from systems and networks is an exfiltration attack vector. An exfiltration attack vector is a method or channel that an APT uses to transfer data from a compromised system or network to an external location. Examples of exfiltration attack vectors include email, FTP, DNS, HTTP, or covert channels.