What is a key characteristic of an external audit compared to an internal audit?

It focuses only on technical vulnerabilities

It is conducted by the organization's own staff

It is performed by an independent third party

An organization's internal audit team is reviewing the effectiveness of its incident response plan. They examine past incident reports, test the plan through tabletop exercises, and interview key personnel. What is the primary purpose of this internal audit?

To evaluate the plan's effectiveness and identify areas for improvement

To replace the need for external audits

To exploit vulnerabilities in the incident response plan

To provide a formal attestation of compliance to external parties

A cloud service provider wants to assure its customers that its data centers meet the requirements of a widely recognized security standard. The provider hires an independent auditor to assess its controls and issue a formal report. After the audit, the provider publishes a summary of the auditor's findings. What is this summary called?

Vulnerability assessment report

CompTIASecurity+

Domain 5Objective 5

Audits and Assessments SY0-701 Practice Questions (Page 4)

Part of the Security program management and oversight domain, which accounts for 20% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

4concepts

20%of the exam

Questions 16–20

16foundation · easy
What is a key characteristic of an external audit compared to an internal audit?
Select an answer first
17application · medium
An organization's internal audit team is reviewing the effectiveness of its incident response plan. They examine past incident reports, test the plan through tabletop exercises, and interview key personnel. What is the primary purpose of this internal audit?
Select an answer first
18application · medium
A cloud service provider wants to assure its customers that its data centers meet the requirements of a widely recognized security standard. The provider hires an independent auditor to assess its controls and issue a formal report. After the audit, the provider publishes a summary of the auditor's findings. What is this summary called?
Select an answer first
19foundation · easy
An organization must provide evidence to a customer that its data center operations meet the ISO 27001 standard. The organization hires an independent third party to evaluate its controls and issue a formal statement of conformity. Which term best describes this process?
Select an answer first
20foundation · easy
A company is required by a regulatory body to have an independent assessment of its security controls. Which type of audit fulfills this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Audits and Assessments SY0-701 Practice Questions (Page 4)

Questions 16–20

What is a key characteristic of an external audit compared to an internal audit?

An organization's internal audit team is reviewing the effectiveness of its incident response plan. They examine past incident reports, test the plan through tabletop exercises, and interview key personnel. What is the primary purpose of this internal audit?

An organization must provide evidence to a customer that its data center operations meet the ISO 27001 standard. The organization hires an independent third party to evaluate its controls and issue a formal statement of conformity. Which term best describes this process?

A company is required by a regulatory body to have an independent assessment of its security controls. Which type of audit fulfills this requirement?

Keep studying — Security program management and oversight