ISACA Cybersecurity Audit Certificate Practice Exams
Last updated on Oct 23,2026- Exam Code: Cybersecurity Audit Certificate
- Exam Name: ISACA Cybersecurity Audit Certificate Exam
- Certification Provider: ISACA
- Latest update: Oct 23,2026
Which of the following is the BEST method of maintaining the confidentiality of digital information?
- A . Use of access controls, file permissions, and encryption
- B . Use of backups and business continuity planning
- C . Use of logging digital signatures, and write protection
- D . Use of the awareness tracing programs and related end-user testing
Which of the following is an important reason for tracing the access and origin of an intrusion once it has been detected?
- A . To create appropriate security awareness content to avoid recurrence
- B . To determine the impact of the intrusion event
- C . To perform a root cause analysis of the intrusion event
- D . To determine and correct any system weaknesses
Which of the following security mechanisms provides the BEST protection of data when a computer is stolen?
- A . Password-based access control
- B . Digital signature
- C . Secret key encryption
- D . Cryptographic hash function
Cyber threat intelligence aims to research and analyze trends and technical developments in which of the following areas?
- A . Industry-specific security regulator
- B . Cybercrime, hacktism. and espionage
- C . Cybersecurity risk scenarios
- D . Cybersecurity operations management
Which intrusion detection system component is responsible for collecting data in the form of network packets, log files, or system call traces?
- A . Packet filters
- B . Analyzers
- C . Administration modules
- D . Sensors
Which of the following is a weakness associated with the use of symmetric, private keys in wired equivalent privacy (WEP) encryption?
- A . Keys change periodically on networks.
- B . Keys are stored in the cloud.
- C . Keys remain unchanged on networks for extended times.
- D . Keys are not retrievable.
Which of the following is the GREATEST advantage of using a virtual private network (VPN) over dedicated circuits and dial-in servers?
- A . It is more secure
- B . It is more reliable
- C . It is higher speed.
- D . It is more cost effective.
Which of the following presents the GREATEST risk to corporate data pertaining to mobile device
usage?
- A . The mobile device may be subject to remote wipe.
- B . End users are not trained in mobile device management.
- C . The mobile device is not obtained through corporate provisioning.
- D . Privileged access is replicated to the user’s own mobile device.
Which of the following is MOST important to consider when defining actions to be taken in the event an intrusion is detected as part of an intrusion detection system (IDS) policy?
- A . Level of management involvement
- B . Resources available for the IT security team
- C . Level of risk to the organization’s data
- D . Origin of intrusion and attack methods
While risk is measured by potential activity, which of the following describes the actual occurrence of a threat?
- A . Attack
- B . Payload
- C . Vulnerability
- D . Target