NO.10 Which of the following is a feature of an intrusion detection system (IDS)?

NO.11 The risk of an evil twin attack on mobile devices is PRIMARILY due to:

NO.12 Which of the following is a passive activity that could be used by an attacker during reconnaissance to gather information about an organization?

NO.13 Which of the following should an IS auditor do FIRST to ensure cyber security-related legal and regulatory requirements are followed by an organization?

NO.14 While risk is measured by potential activity, which of the following describes the actual occurrence of a threat?

NO.15 Which of the following should an IS auditor do FIRST to ensure cyber security-related legal and regulatory requirements are followed by an organization?

NO.16 Which of the following provides the GREATEST assurance that data can be recovered and restored in a timely manner in the event of data loss?

NO.17 Which of the following is MOST critical to guiding and managing security activities throughout an organization to ensure objectives are met?

NO.18 Which of the following BEST facilitates the development of metrics for repotting to senior management on vulnerability management efforts?

NO.19 Which of the following is the BEST indication of mature third-party vendor risk management for an organization?

NO.20 When reviewing user management roles, which of the following groups presents the GREATEST risk based on their permissions?

NO.21 A data loss prevention (DLP) program helps protect an organization from:

NO.22 Which of the following is an example of an application security control?

NO.23 A cloud service provider is used to perform analytics on an organization’s sensitive dat a. A data leakage incident occurs in the service providers network from a regulatory perspective, who is responsible for the data breach?

NO.24 The discovery of known dangerous artifacts on a network such as IP addresses or domain names helps to identify which of the following?

NO.25 Which process converts extracted information to a format understood by investigators?

NO.26 Which of the following is the BEST indication of mature third-party vendor risk management for an organization?

NO.27 Which control mechanism is used to detect the unauthorized modification of key configuration settings?

NO.28 What is the FIRST activity associated with a successful cyber attack?

NO.29 What is the FIRST phase of the ISACA framework for auditors reviewing cryptographic environments?

NO.30 Which of the following is MOST critical to guiding and managing security activities throughout an organization to ensure objectives are met?

NO.31 In cloud computing, which type of hosting is MOST appropriate for a large organization that wants greater control over the environment?