ISACA Cybersecurity Audit Certificate Practice Exams
Last updated on Oct 22,2026- Exam Code: Cybersecurity Audit Certificate
- Exam Name: ISACA Cybersecurity Audit Certificate Exam
- Certification Provider: ISACA
- Latest update: Oct 22,2026
Which of the following injects malicious scripts into a trusted website to infect a target?
- A . Malicious code
- B . Cross-site scripting
- C . Denial-of-service attack
- D . Structure query language attack
The most common use of asymmetric algorithms is to:
- A . encrypt bulk data.
- B . encrypt data streams.
- C . distribute symmetric keys.
- D . distribute asymmetric keys.
What is the FIRST activity associated with a successful cyber attack?
- A . Exploitation
- B . Reconnaissance
- C . Maintaining a presence
- D . Creating attack tools
Which of the following devices is at GREATEST risk from activity monitoring and data retrieval?
- A . Mobile devices
- B . Cloud storage devices
- C . Desktop workstation
- D . Printing devices
One way to control the integrity of digital assets is through the use of:
- A . policies.
- B . frameworks.
- C . caching
- D . hashing.
Which of the following is the MOST important step to determine the risks posed to an organization by social media?
- A . Review costs related to the organization’s social media outages.
- B . Review cybersecurity insurance requirements for the organization s social media.
- C . Review the disaster recovery strategy for the organization’s social media.
- D . Review access control processes for the organization’s social media accounts.
Which of the following is a known potential risk of using a software defined perimeter (SDP) controller?
- A . Unauthorized access may jeopardize data confidentiality, integrity, or availability.
- B . Operations may be adversely affected if data cannot be recovered and restored timely.
- C . Unauthorized use of valid credentials may compromise encrypted data at rest.
- D . An ineffective firewall may fail to identify and block unwanted network traffic.
When performing a teaming exercise, which team works to integrate the defensive tactics and controls from the defending team with the threats and vulnerabilities found by the attacking team?
- A . Yellow team
- B . Red team
- C . Purple team
- D . Black team
in key protection/management, access should be aligned with which of the following?
- A . System limitation
- B . Least privilege
- C . Position responsibilities
- D . Role descriptions
Which of the following types of backups requires the MOST time?
- A . Incremental backup
- B . Differential backup
- C . Full backup
- D . Offsite backup