ISACA Cybersecurity Audit Certificate Practice Exams
Last updated on Oct 22,2026- Exam Code: Cybersecurity Audit Certificate
- Exam Name: ISACA Cybersecurity Audit Certificate Exam
- Certification Provider: ISACA
- Latest update: Oct 22,2026
What is the MAIN consideration when storing backup files?
- A . Utilizing solid slate device (SSDJ media for quick recovery
- B . Storing backup files on public cloud storage
- C . Protecting the off-site data backup copies from unauthorized access
- D . Storing copies on-site for ease of access during incident response
Which of the following is a team created PRIMARILY to improve the security posture of an organization?
- A . Computer emergency response team (CERT)
- B . Security operations center (SOC) team
- C . Disaster recovery team
- D . Risk management team
Which of the following backup procedure would only copy files that have changed since the last backup was made?
- A . Incremental backup
- B . Daily backup
- C . Differential backup
- D . Full backup
Which of the following is a feature of an intrusion detection system (IDS)?
- A . Intrusion prevention
- B . Automated response
- C . Interface with firewalls
- D . Back doors into applications
The "recover" function of the NIST cybersecurity framework is concerned with:
- A . allocating costs incurred as part of the implementation of cybersecurity measures.
- B . taking appropriate action to contain and eradicate a security incident.
- C . identifying critical data to be recovered in case of a security incident.
- D . planning for resilience and timely repair of compromised capabilities and services.
The GREATEST benefit of using the CSA Cloud Controls Matrix is that it provides:
- A . a mapping to multiple control frameworks.
- B . severity rankings for identified deficiencies.
- C . templates of vetted cloud auditing programs.
- D . control specifications prioritized by importance.
Which of the following is an example of an application security control?
- A . Secure coding
- B . User security awareness training
- C . Security operations center
- D . Intrusion detection
Which of the following is used to help identify the most appropriate controls to meet an organization’s specific security requirements?
- A . Risk assessment
- B . Maturity model
- C . Contingency planning
- D . Security assessment
When passwords are tied into key generation, the strength of the encryption algorithm is:
- A . voided.
- B . increased.
- C . diminished.
- D . maintained.
Using digital evidence to provide validation that an attack has actually occurred is an example of;
- A . computer forensic
- B . extraction.
- C . identification.
- D . data acquisition.