Get Isaca Cybersecurity-Audit-Certificate Exam Practice Questions - Real and Updated

Answer : D

When outsourcing a key business function, the most important consideration to mitigate cybersecurity risks is to include a cybersecurity clause in the contract. This clause should clearly define the cybersecurity responsibilities, expectations, and requirements for the service provider. It ensures that the service provider adheres to specific cybersecurity standards and practices, and it provides a legal basis for enforcement and liability in the event of a cybersecurity breach.

Answer : A

The phase that typically occurs before containment in an incident response is Identification. This phase involves detecting and determining the nature of the incident. It's crucial to correctly identify an incident before it can be contained, as containment strategies may vary depending on the type of incident.

Answer : B

Hacktivistsare politically motivated hackers who target specific individuals or organizations to achieve various ideological ends. They may use various methods such as defacing websites, launching denial-of-service attacks, leaking confidential information, or spreading propaganda to advance their causes or protest against perceived injustices.

Answer : C

An information security procedure that indicates a requirement to sandbox emails means that the emails need to be isolated and tested for malicious content. This is because sandboxing is a technique that creates a virtual or isolated environment, where suspicious or untrusted emails can be executed or analyzed without affecting the rest of the system or network. Sandboxing helps to detect and prevent malware, phishing, or spam attacks that may be embedded in emails, and protect the users and the organization from potential harm. The other options are not what sandboxing emails means, but rather different concepts or techniques that are related to information security, such as encryption and nonrepudiation (A), backup and recovery (B), or firewall and delivery (D).

Answer : A

Security frameworks are crucial in a cybersecurity strategy because they provide a structured approach to managing and mitigating risks. They help in integrating various cybersecurity activities and guiding them towards achieving the strategic objectives of the organization. By establishing a common language and systematic methodology, they ensure that all parts of the organization's cybersecurity program are aligned and working cohesively.