CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. ISACA
  5. Cybersecurity-Audit-Certificate

Free Cybersecurity-Audit-Certificate Exam Braindumps (page: 2)

Page 1 of 35
PDF with 134 Questions

The second line of defense in cybersecurity includes:

  1. conducting organization-wide control self-assessments.
  2. risk management monitoring, and measurement of controls.
  3. separate reporting to the audit committee within the organization.
  4. performing attack and breach penetration testing.

Answer(s): B

Explanation:

The second line of defense in cybersecurity includes risk management monitoring, and measurement of controls. This is because the second line of defense is responsible for ensuring that the first line of defense (the operational managers and staff who own and manage risks) is effectively designed and operating as intended. The second line of defense also provides guidance, oversight, and challenge to the first line of defense. The other options are not part of the second line of defense, but rather belong to the first line of defense (A), the third line of defense C, or an external service provider (D).



Within the NIST core cybersecurity framework, which function is associated with using organizational understanding to minimize risk to systems, assets, and data?

  1. Detect
  2. Identify
  3. Recover
  4. Respond

Answer(s): B

Explanation:

Within the NIST core cybersecurity framework, the identify function is associated with using organizational understanding to minimize risk to systems, assets, and data. This is because the identify function helps organizations to develop an organizational understanding of their cybersecurity risk management posture, as well as the threats, vulnerabilities, and impacts that could affect their business objectives. The other functions are not directly related to using organizational understanding, but rather focus on detecting (A), recovering C, or responding (D) to cybersecurity events.



The "recover" function of the NISI cybersecurity framework is concerned with:

  1. planning for resilience and timely repair of compromised capacities and service.
  2. identifying critical data to be recovered m case of a security incident.
  3. taking appropriate action to contain and eradicate a security incident.
  4. allocating costs incurred as part of the implementation of cybersecurity measures.

Answer(s): A

Explanation:

The "recover" function of the NIST cybersecurity framework is concerned with planning for resilience and timely repair of compromised capacities and service. This is because the recover function helps organizations to restore normal operations as quickly as possible after a cybersecurity incident, while also learning from the incident and improving their security posture. The other options are not part of the recover function, but rather belong to the identify (B), respond C, or protect (D) functions.



Availability can be protected through the use of:

  1. user awareness training and related end-user training.
  2. access controls. We permissions, and encryption.
  3. logging, digital signatures, and write protection.
  4. redundancy, backups, and business continuity management

Answer(s): D

Explanation:

Availability can be protected through the use of redundancy, backups, and business continuity management. This is because these measures help to ensure that systems, data, and services are accessible and functional at all times, even in the event of a disruption or disaster. The other options are not directly related to protecting availability, but rather focus on enhancing confidentiality (A), integrity C, or awareness (D).






Post your Comments and Discuss ISACA Cybersecurity-Audit-Certificate exam with other Community members: