ISACA Cybersecurity Audit Certificate Practice Exams
Last updated on Oct 22,2026- Exam Code: Cybersecurity Audit Certificate
- Exam Name: ISACA Cybersecurity Audit Certificate Exam
- Certification Provider: ISACA
- Latest update: Oct 22,2026
The protection of information from unauthorized access or disclosure is known as:
- A . access control.
- B . cryptograph
- C . media protect on.
- D . confidentiality.
A cloud service provider is used to perform analytics on an organization’s sensitive dat
a. A data leakage incident occurs in the service providers network from a regulatory perspective, who is responsible for the data breach?
- A . The service provider
- B . Dependent upon the nature of breath
- C . Dependent upon specific regulatory requirements
- D . The organization
Which of the following is a computer-software vulnerability that is unknown to those who would be interested in mitigating the vulnerability?
- A . Cross-site scripting vulnerability
- B . SQL injection vulnerability
- C . Memory leakage vulnerability
- D . Zero-day vulnerability
Security awareness training is MOST effective against which type of threat?
- A . Command injection
- B . Denial of service
- C . Social engineering
- D . Social injection
Which of the following presents the GREATEST challenge to information risk management when outsourcing IT function to a third party?
- A . It is difficult to know the applicable regulatory requirements when data is located on another country.
- B . Providers may be reluctant to share technical delays on the extent of their information protection mechanisms.
- C . Providers may be restricted from providing detailed ^formation on their employees.
- D . It is difficult to determine vendor financial viability to assess their potential inability to meet contract requirements.
Using a data loss prevention (DLP) solution to monitor data saved to a USB memory device is an example of managing:
- A . data in use.
- B . data redundancy.
- C . data availability.
- D . data at rest.
Which of the following is the GREATEST drawback when using the AICPA/CICA Trust Sen/ices to evaluate a cloud service provider?
- A . Incompatibility with cloud service business model
- B . Lack of specificity m the principles
- C . Omission of confidentiality in the criteria
- D . Inability to issue SOC 2 or SOC 3 reports
Which of the following BIST enables continuous identification and mitigation of security threats to an organization?
- A . demit/ and access management (1AM)
- B . Security operations center (SOC)
- C . Security training and awareness
- D . Security information and event management (SEM)
What is the FIRST phase of the ISACA framework for auditors reviewing cryptographic environments?
- A . Evaluation of implementation details
- B . Hands-on testing
- C . Risk-based shakeout
- D . Inventory and discovery
Which of the following backup methods takes the MOST time for restoration of data?
- A . Incremental backup
- B . Offsite backup
- C . Full backup
- D . Differential backup