Question 1

Which of the following statements is true regarding the use of public key encryption to secure data while it is being transmitted across a network?

Options :

A : Both the key used to encrypt the data and the key used to decrypt the data are made public.

B : The key used to encrypt the data is kept private but the key used to decrypt the data is made public.

C : The key used to encrypt the data is made public but the key used to decrypt the data is kept private.

D : Both the key used to encrypt the data and the key used to decrypt the data are made private.

Answer: C

Question 2

An internal auditor discovered that several unauthorized modifications were made to the production version of an organization's accounting application. Which of the following best describes this deficiency?

Options :

A : Production controls weakness.

B : Application controls weakness.

C : Authorization controls weakness.

D : Change controls weakness.

Answer: D

Question 3

Which of the following attributes of data are cybersecurity controls primarily designed to protect?

Options :

A : Veracity, velocity, and variety

B : Integrity, availability and confidentiality

C : Accessibility, accuracy, and effectiveness

D : Authorization logical access and physical access

Answer: B

Question 4

Which of the following is an established systems development methodology?

Options :

A : Waterfall

B : Projects in Controlled Environments (PRINCE2)

C : Information Technology Infrastructure Library (ITIL)

D : COBIT

Answer: A

Question 5

An internal auditor is completing an access control assessment of a telecommunication organizationâ€™s offsite facility. Which of the following physical security measures would best prevent unauthorized access to the facility?

Options :

A : Proximity badges.

B : Key locks.

C : Combination codes.

D : Biometric locks.

Answer: D