Free Practice Questions for Isaca Cybersecurity-Audit-Certificate Exam

Answer : A

A security setting that locks a profile after a certain number of unsuccessful login attempts is designed to mitigate brute force attacks. In such attacks, an adversary systematically tries numerous combinations of usernames and passwords to gain unauthorized access. By locking the account after several failed attempts, it prevents the attacker from continuing to try different password combinations, thus thwarting the brute force method.

Reference= This security measure is a common recommendation in cybersecurity practices, including those suggested by ISACA, to protect against brute force attacks.It is an effective control to prevent attackers from continuously attempting to guess a user's credentials123.

Answer : C

When defining actions for an IDS policy, the most important consideration is the level of risk to the organization's data. This involves assessing the potential impact of the intrusion on the confidentiality, integrity, and availability of data, which guides the prioritization and response efforts.

Reference= ISACA's guidance on cybersecurity incident response highlights the importance of understanding the risk to data as a key factor in shaping the response to intrusions.This includes evaluating the severity of the threat and the sensitivity of the affected data to determine the appropriate actions123.

Answer : A

The CSA Cloud Controls Matrix (CCM) is a cybersecurity control framework specifically designed for cloud computing. It consists of a comprehensive set of control objectives that are structured across different domains covering all key aspects of cloud technology. One of the greatest benefits of using the CCM is its ability to map these controls to multiple industry-accepted security standards, regulations, and control frameworks. This mapping facilitates a streamlined approach to compliance and security assurance across various standards, making it an invaluable tool for organizations operating in the cloud.

Answer : D

Broad network access refers to the computing capabilities that are available over a network and can be accessed by diverse client platforms, such as personal computers, mobile phones, and tablets. This characteristic is one of the essential features of cloud computing, which allows users to access services using a variety of devices through standard mechanisms.

Answer : A

One of the known potential risks of using a Software Defined Perimeter (SDP) controller is unauthorized access, which can jeopardize the confidentiality, integrity, or availability of data. SDP controllers work by creating a boundary around network resources, but if an unauthorized user gains access, perhaps through stolen credentials or exploitation of a vulnerability, they could potentially access sensitive data or disrupt services.