[Q31-Q49] Full Cybersecurity-Audit-Certificate Practice Test and 77 unique questions with explanations waiting just for you!

NO.31 Which of the following provides the GREATEST assurance that data can be recovered and restored in a timely manner in the event of data loss?

NO.32 Which of the following is a MAIN benefit of using Security as a Service (SECaaS) providers?

NO.33 The protection of information from unauthorized access or disclosure is known as:

NO.34 An IS auditor has learned that a cloud service provider has not adequately secured its application programming interface (API). Which of the following is MOST important for the auditor to consider in an assessment of the potential risk factors?

NO.35 Cyber threat intelligence aims to research and analyze trends and technical developments in which of the following areas?

NO.36 Which of the following is the MOST cost-effective technique for implementing network security for human resources (HR) desktops and internal laptop users in an organization?

NO.37 One way to control the integrity of digital assets is through the use of:

NO.38 Which of the following is the MOST serious consequence of mobile device loss or theft?

NO.39 Which of the following is an example of an application security control?

NO.40 Which control mechanism is used to detect the unauthorized modification of key configuration settings?

NO.41 he MOST significant limitation of vulnerability scanning is the fact that modern scanners only detect:

NO.42 Which of the following would provide the BEST basis for allocating proportional protection activities when comprehensive classification is not feasible?

NO.43 What would be an IS auditor’s BEST response to an IT managers statement that the risk associated with the use of mobile devices in an organizational setting is the same as for any other device?

NO.44 An information security procedure indicates a requirement to sandbox emails. What does this requirement mean?

NO.45 A cloud service provider is used to perform analytics on an organization’s sensitive data. A data leakage incident occurs in the service providers network from a regulatory perspective, who is responsible for the data breach?

NO.46 Which of the following is an attack attribute of an advanced persistent threat (APT) that is designed to remove data from systems and networks?

NO.47 What is the FIRST phase of the ISACA framework for auditors reviewing cryptographic environments?

NO.48 What is the FIRST phase of the ISACA framework for auditors reviewing cryptographic environments?

NO.49 Which of the following backup procedure would only copy files that have changed since the last backup was made?