ISACA Cybersecurity Audit Certificate Practice Exams
Last updated on Oct 24,2026- Exam Code: Cybersecurity Audit Certificate
- Exam Name: ISACA Cybersecurity Audit Certificate Exam
- Certification Provider: ISACA
- Latest update: Oct 24,2026
Question #131
The administrator for a human resources (HR) system has access to the system as a user as well as support.
Which of the following is the BEST control to help prevent intentional or accidental misuse of the privilege?
- A . Perform background checks on any users or support with administrator access.
- B . Ensure frequent log monitoring of the administrator by a manager.
- C . Set up multi-factor authentication for privileged accounts.
- D . Require the administrator to create a separate non-privileged user account for user tasks.
Correct Answer: D
Question #132
In the context of network communications, what are the two types of attack vectors?
- A . Ingress and egress
- B . Physical theft and loss
- C . Insider and privilege misuse
- D . Malware and phishing
Correct Answer: A
Question #133
Which of the following is the MAIN reason why domain name system (DNS) data exfiltration is a significant threat to mobile computing?
- A . It is simple to inject malformed code to compromise data processing.
- B . It is easy to execute command and control of the mobile target.
- C . It is difficult to distinguish malicious activity from legitimate traffic.
- D . There is relative anonymity of network connections outside the organization.
Correct Answer: C
Question #134
What would be an IS auditor’s BEST response to an IT managers statement that the risk associated with the use of mobile devices in an organizational setting is the same as for any other device?
- A . Replication of privileged access and the greater likelihood of physical loss increases risk levels.
- B . The risk associated with mobile devices is less than that of other devices and systems.
- C . The risk associated with mobile devices cannot be mitigated with similar controls for workstations.
- D . The ability to wipe mobile devices and disable connectivity adequately mitigates additional
Correct Answer: A