ISACA Cybersecurity Audit Certificate Practice Exams
Last updated on Oct 23,2026- Exam Code: Cybersecurity Audit Certificate
- Exam Name: ISACA Cybersecurity Audit Certificate Exam
- Certification Provider: ISACA
- Latest update: Oct 23,2026
Which of the following is a MAIN benefit of using Security as a Service (SECaaS) providers?
- A . Significant investments and specialized security skills are not required.
- B . Enterprises can use the latest technologies to counter threats that are constantly evolving.
- C . SECaaS providers are compliant with specific security requirements and new regulations.
- D . Available security services from providers are affordable to enterprises of all sizes.
When reviewing user management roles, which of the following groups presents the GREATEST risk based on their permissions?
- A . Privileged users
- B . Database administrators
- C . Terminated employees
- D . Contractors
Which type of firewall blocks many types of attacks, such as cross-site scripting (XSS) and structured query language (SQL) injection?
- A . Intrusion detection
- B . Stateful inspection
- C . Host-based
- D . Web application
The GREATEST advantage of using a common vulnerability scoring system is that it helps with:
- A . risk aggregation.
- B . risk prioritization.
- C . risk elimination.
- D . risk quantification
A data loss prevention (DLP) program helps protect an organization from:
- A . crypto ransomware infection.
- B . unauthorized access to servers and applications.
- C . unauthorized data modification.
- D . exfiltration of sensitive data.
Which of the following provides the GREATEST assurance that data can be recovered and restored in a timely manner in the event of data loss?
- A . Backups of information are regularly tested.
- B . Data backups are available onsite for recovery.
- C . The recovery plan is executed during or after an event
- D . full data backup is performed daily.
Which process converts extracted information to a format understood by investigators?
- A . Reporting
- B . Ingestion
- C . imaging
- D . Filtering
Which of the following BEST helps IT administrators to ensure servers have no unnecessary features installed?
- A . Comparison against information security policy
- B . Review of vulnerability scanning results
- C . Comparison against baseline standards
- D . Verification of user acceptance testing
Which of the following are politically motivated hackers who target specific individuals or organizations to achieve various ideological ends?
- A . Malware researchers
- B . Hacktivists
- C . Cybercriminals
- D . Script kiddies
Which of the following is the GREATEST risk pertaining to sensitive data leakage when users set mobile devices to "always on" mode?
- A . An adversary can predict a user’s login credentials.
- B . Mobile connectivity could be severely weakened.
- C . A user’s behavior pattern can be predicted.
- D . Authorization tokens could be exploited.