Free Cybersecurity-Audit-Certificate Exam Braindumps
ISACA Cybersecurity Audit Certificate Questions 61–65 (page: 14)

Updated On: 10-Feb-2026

Which of the following BEST characterizes security mechanisms for mobile devices?

  1. Easy to control through mobile device management
  2. Comparatively weak relative to workstations
  3. Inadequate for organizational use
  4. Configurable and reliable across device types

Answer(s): A

Explanation:

The BEST characteristic that describes security mechanisms for mobile devices is easy to control through mobile device management. This is because mobile device management is a technique that allows organizations to centrally manage and secure mobile devices, such as smartphones, tablets, laptops, etc., that are used by their employees or customers. Mobile device management helps to enforce security policies, configure settings, install applications, monitor usage, wipe data, etc., on mobile devices remotely and efficiently. The other options are not characteristics that describe security mechanisms for mobile devices, but rather different aspects or factors that affect security mechanisms for mobile devices, such as weakness (B), inadequacy C, or reliability (D).



Which of the following is the GREATEST drawback when using the AICPA/CICA Trust Sen/ices to evaluate a cloud service provider?

  1. Incompatibility with cloud service business model
  2. Lack of specificity m the principles
  3. Omission of confidentiality in the criteria
  4. Inability to issue SOC 2 or SOC 3 reports

Answer(s): B

Explanation:

The GREATEST drawback when using the AICPA/CICA Trust Services to evaluate a cloud service provider is the lack of specificity in the principles. This is because the AICPA/CICA Trust Services are a set of principles and criteria that provide guidance for evaluating and reporting on controls over information systems and services. However, the principles and criteria are very broad and generic, and do not address the specific risks and challenges that are associated with cloud services, such as data sovereignty, multi-tenancy, portability, etc. The other options are not drawbacks when using the AICPA/CICA Trust Services to evaluate a cloud service provider, but rather different aspects or benefits of using the AICPA/CICA Trust Services to evaluate a cloud service provider, such as compatibility (A), confidentiality C, or reporting (D).



Which of the following cloud characteristics refers to resource utilization that can be optimized by leveraging charge-per-use capabilities?

  1. On demand self-service
  2. Elasticity
  3. Measured service
  4. Resource pooling

Answer(s): C

Explanation:

The cloud characteristic that refers to resource utilization that can be optimized by leveraging charge- per-use capabilities is measured service. This is because measured service is a characteristic of cloud computing that involves monitoring, controlling, and reporting on the usage and consumption of cloud resources by cloud providers and consumers. Measured service helps to optimize resource utilization by leveraging charge-per-use capabilities, which means that cloud consumers only pay for the amount of resources that they actually use or consume, rather than paying for fixed or predetermined amounts of resources. The other options are not cloud characteristics that refer to resource utilization that can be optimized by leveraging charge-per-use capabilities, but rather different characteristics of cloud computing that describe other aspects or benefits of cloud services,

such as on demand self-service (A), elasticity (B), or resource pooling (D).



Which of the following is the MOST important consideration when choosing between different types of cloud services?

  1. Emerging risk and infrastructure scalability
  2. Security features available on demand
  3. Overall risk and benefits
  4. Reputation of the cloud providers

Answer(s): C

Explanation:

The MOST important consideration when choosing between different types of cloud services is the overall risk and benefits. This is because choosing between different types of cloud services involves weighing the trade-offs between the risk and benefits of each type of cloud service, such as Software as a Service (SaaS), Platform as a Service (PaaS), or Infrastructure as a Service (IaaS). For example, SaaS may offer more benefits in terms of cost savings, scalability, and usability, but also more risks in terms of security, privacy, and compliance. On the other hand, IaaS may offer more benefits in terms of flexibility, customization, and control, but also more risks in terms of complexity, management, and maintenance. The other options are not the most important consideration when choosing between different types of cloud services, but rather different aspects or factors that affect the choice of cloud services, such as emerging risk and infrastructure scalability (A), security features available on demand (B), or reputation of the cloud providers (D).



Which of the following devices is at GREATEST risk from activity monitoring and data retrieval?

  1. Mobile devices
  2. Cloud storage devices
  3. Desktop workstation
  4. Printing devices

Answer(s): A

Explanation:

The device that is at GREATEST risk from activity monitoring and data retrieval is mobile devices. This is because mobile devices are devices that are portable, wireless, and connected to the Internet or other networks, such as smartphones, tablets, laptops, etc. Mobile devices are at greatest risk from activity monitoring and data retrieval, because they can be easily lost, stolen, or compromised by attackers who can access or extract the data stored or transmitted on the devices. Mobile devices can also be subject to activity monitoring and data retrieval by third-party applications or services that may collect or share the user's personal or sensitive information without their consent or knowledge. The other options are not devices that are at greatest risk from activity monitoring and data retrieval, but rather different types of devices that may have different levels of risk or protection from activity monitoring and data retrieval, such as cloud storage devices (B), desktop workstations C, or printing devices (D).



Viewing page 14 of 28
Viewing questions 66 - 70 out of 134 questions


Post your Comments and Discuss ISACA Cybersecurity-Audit-Certificate exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!