ISACA Cybersecurity Audit Certificate Practice Exams
Last updated on Oct 24,2026- Exam Code: Cybersecurity Audit Certificate
- Exam Name: ISACA Cybersecurity Audit Certificate Exam
- Certification Provider: ISACA
- Latest update: Oct 24,2026
Which of the following provides an early signal of increasing risk exposures for an organization?
- A . Key performance indicators
- B . Risk management policies and procedures
- C . Key risk indicators
- D . Capability maturity model integration
During which incident response phase is evidence obtained and preserved?
- A . Lessons learned
- B . Containment
- C . Eradication
- D . Recovery
Which of the following is a limitation of intrusion detection systems (IDS)?
- A . Limited evidence on intrusive activity
- B . Application-level vulnerabilities
- C . Lack of Interface with system tools
- D . Weak passwords for the administration console
Which of the following is MOST critical to guiding and managing security activities throughout an organization to ensure objectives are met?
- A . Allocating a significant amount of budget to security investments
- B . Adopting industry security standards and frameworks
- C . Establishing metrics to measure and monitor security performance
- D . Conducting annual security awareness training for all employees
Why are security frameworks an important part of a cybersecurity strategy?
- A . They serve to integrate and guide activities.
- B . They contain the necessary policies and standards.
- C . They provide protection to the organization.
- D . They are required for regulatory compliance.
Which of the following should an IS auditor do FIRST to ensure cyber security-related legal and regulatory requirements are followed by an organization?
- A . Determine if the cybersecurity program is mapped to relevant legal and regulatory requirements.
- B . Review the most recent legal and regulatory audit report conducted by an independent party.
- C . Determine if there is a formal process to review changes in legal and regulatory requirements.
D Obtain a list of relevant legal and regulatory requirements.
The "recover" function of the NISI cybersecurity framework is concerned with:
- A . planning for resilience and timely repair of compromised capacities and service.
- B . identifying critical data to be recovered m case of a security incident.
- C . taking appropriate action to contain and eradicate a security incident.
- D . allocating costs incurred as part of the implementation of cybersecurity measures.
Which of the following is the MOST serious consequence of mobile device loss or theft?
- A . Cost of purchasing replacement devices
- B . Physical damage to devices
- C . Installation of unauthorized applications
- D . Compromise of transient data
In public key cryptography, digital signatures are primarily used to;
- A . ensure message integrity.
- B . ensure message accuracy.
- C . prove sender authenticity.
- D . maintain confidentiality.
Which of the following cloud characteristics describes computing capabilities that can be provisioned without human interaction from the service provider?
- A . On-demand self-service
- B . Measured service
- C . Broad network access
- D . Agile service management