最新的ISACA Cybersecurity-Audit-Certificate免費考試真題

問題1

In cloud computing, which type of hosting is MOST appropriate for a large organization that wants greater control over the environment?

A. Public hosting

B. Private hosting

C. Shared hosting

D. Hybrid hosting

正確答案: B

說明：（僅 Fast2test 成員可見）

問題2

What is the FIRST phase of the ISACA framework for auditors reviewing cryptographic environments?

A. Inventory and discovery

B. Hands-on testing

C. Hand-based shakeout

D. Evaluation of implementation details

正確答案: A

說明：（僅 Fast2test 成員可見）

問題3

Which of the following presents the GREATEST challenge to information risk management when outsourcing IT function to a third party?

A. It is difficult to know the applicable regulatory requirements when data is located on another country.

B. Providers may be restricted from providing detailed ^formation on their employees.

C. Providers may be reluctant to share technical delays on the extent of their information protection mechanisms.

D. It is difficult to determine vendor financial viability to assess their potential inability to meet contract requirements.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題4

Which of the following is the MOST important step to determine the risks posed to an organization by social media?

A. Review costs related to the organization's social media outages.

B. Review access control processes for the organization's social media accounts.

C. Review the disaster recovery strategy for the organization's social media.

D. Review cybersecurity insurance requirements for the organization s social media.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題5

Which of the following is used to help identify the most appropriate controls to meet an organization's specific security requirements?

A. Contingency planning

B. Risk assessment

C. Security assessment

D. Maturity model

正確答案: B

說明：（僅 Fast2test 成員可見）

問題6

A cybersecurity audit reveals that an organization's risk management function has the right to overrule business management decisions. Would the IS auditor find this arrangement acceptable?

A. Yes, because the second line of defense is generally on a higher organizational level than the first line.

B. No, because the risk management function should be the body that makes risk-related decisions for the organization.

C. No, because the risk management's oversight function would potentially lose its ability to objectively monitor and measure the business.

D. Yes, because this arrangement ensures adequate oversight and enforcement of risk management in the organization.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題7

Which of the following provides the GREATEST assurance that data can be recovered and restored in a timely manner in the event of data loss?

A. Backups of information are regularly tested.

B. Data backups are available onsite for recovery.

C. The recovery plan is executed during or after an event

D. full data backup is performed daily.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題8

Availability can be protected through the use of:

A. access controls. We permissions, and encryption.

B. redundancy, backups, and business continuity management

C. logging, digital signatures, and write protection.

D. user awareness training and related end-user training.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題9

Which of the following cloud characteristics refers to resource utilization that can be optimized by leveraging charge-per-use capabilities?

A. Elasticity

B. On demand self-service

C. Measured service

D. Resource pooling

正確答案: C

說明：（僅 Fast2test 成員可見）

問題10

Which of the following is a computer-software vulnerability that is unknown to those who would be interested in mitigating the vulnerability?

A. Zero-day vulnerability

B. Memory leakage vulnerability

C. SQL injection vulnerability

D. Cross-site scripting vulnerability

正確答案: A

說明：（僅 Fast2test 成員可見）

最新的ISACA Cybersecurity Audit Certificate - Cybersecurity-Audit-Certificate免費考試真題

聯系我們

站內鏈接

最新更新