Which network security component is specifically designed to inspect traffic for known attack patterns and actively block malicious packets in real time?

Intrusion Detection System (IDS)

Intrusion Prevention System (IPS)

Virtual Private Network (VPN) concentrator

A company allows employees to use personal smartphones for work email and calendar. The security team wants to protect corporate data without infringing on employee privacy. They are considering either MDM with full device management or MAM with app-level controls. Which approach best balances security and privacy?

Use MAM to enforce a device passcode and enable full remote wipe.

Use MAM to manage only the corporate email and calendar apps, with selective wipe.

Use MDM to enforce a device passcode and enable remote wipe.

Use MDM with a container that separates personal and corporate data.

A company needs to ensure the integrity and authenticity of a software update before it is installed on employee workstations. The update is distributed over the internet. Which approach should the company use?

Encrypt the update file with a symmetric key and share the key with all employees.

Use a hash of the update file and publish it on the company website.

Encrypt the update file with the employees' public keys.

Digitally sign the update file with the company's private key and distribute the public key to workstations.

What is the primary role of a Certificate Authority (CA) in a Public Key Infrastructure (PKI)?

To encrypt all network traffic between clients and servers

To store users' private keys in a central repository

To issue and digitally sign digital certificates that bind a public key to an identity

To generate random passwords for user authentication

A company needs to securely exchange encrypted files with an external partner. The partner does not have a pre-shared key, and the company wants to ensure that only the partner can decrypt the files. Which encryption approach should the company use?

Use the company's private key to encrypt the files.

Use a symmetric key and send it to the partner over email.

Use a hash of the files to encrypt them.

Use the partner's public key to encrypt the files.

Certified Information Systems Auditor

Domain 5Objective 4

Network, Endpoint, and Data Security CISA Practice Questions (Page 1)

Part of the Protection of Information Assets domain, which accounts for 26% of the CISA exam.

35questions here

7free pages

10concepts

26%of the exam

Questions 1–5

1foundation · easy
Which network security component is specifically designed to inspect traffic for known attack patterns and actively block malicious packets in real time?
Select an answer first
2expert · hard
A company allows employees to use personal smartphones for work email and calendar. The security team wants to protect corporate data without infringing on employee privacy. They are considering either MDM with full device management or MAM with app-level controls. Which approach best balances security and privacy?
Select an answer first
3application · medium
A company needs to ensure the integrity and authenticity of a software update before it is installed on employee workstations. The update is distributed over the internet. Which approach should the company use?
Select an answer first
4foundation · easy
What is the primary role of a Certificate Authority (CA) in a Public Key Infrastructure (PKI)?
Select an answer first
5application · medium
A company needs to securely exchange encrypted files with an external partner. The partner does not have a pre-shared key, and the company wants to ensure that only the partner can decrypt the files. Which encryption approach should the company use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CISA” is a trademark of its owner, used for identification only.