Isaca Updated Cybersecurity-Audit-Certificate Exam Questions and Answers by asiyah

In cloud computing, the type of hosting that is MOST appropriate for a large organization that wants greater control over the environment is private hosting. Private hosting is a type of cloud service model where the cloud infrastructure is dedicated to a single organization and hosted either on-premise or off-premise by a third-party provider. Private hosting offers more control over the security, performance, customization, and compliance of the cloud environment than other types of hosting.

Replicating privileged access to a user’s own mobile device presents the greatest risk to corporate data. This is because it potentially allows unauthorized access to sensitive information if the device is lost, stolen, or compromised. Privileged access means having elevated permissions that are typically reserved for administrators. When such access is available on a personal device, it bypasses many of the security controls that a company would normally have in place.

Option A, remote wipe, is actually a security feature that can protect data if a device is lost or stolen. Option B, lack of training, can increase risk but does not directly expose data like privileged access does. Option C, devices not obtained through corporate provisioning, can be a risk, but this risk is generally less than that of replicating privileged access.

References: The information provided here is based on standard cybersecurity practices and principles, which are likely to be consistent with those found in ISACA’s Cybersecurity Audit resources. For specific references, please consult the ISACA Cybersecurity Audit Manual or related study guides1.

Using a data loss prevention (DLP) solution to monitor data saved to a USB memory device is an example of managing data at rest. Data at rest is data that is stored on a device or media, such as hard disks, flash drives, tapes, or CDs. Data at rest can be exposed to unauthorized access, theft, orloss if not properly protected. A DLP solution is a tool that monitors and controls the movement and usage of data across an organization’s network or endpoints. A DLP solution can prevent users from saving sensitive data to removable devices or alert on any violations of data policies.

Elliptic curve cryptography (ECC) is a more efficient form of public key cryptography as it demands less computational power and offers more security per bit. ECC is based on the mathematical properties of elliptic curves, which are curves that have a special shape that makes them suitable for cryptography. ECC can achieve the same level of security as other public key algorithms with much smaller key sizes, which reduces storage and bandwidth requirements.