A company is moving a legacy application to a public cloud IaaS environment. The security team is concerned about the responsibility for patching the operating system of the virtual machines. According to the shared responsibility model, who is responsible for patching the OS?

The cloud provider, because they manage the hypervisor.

The company, but only if they use a managed service like PaaS.

The company, because they control the virtual machines and their operating systems.

Both the provider and the company share equal responsibility for OS patches.

A company is setting up a new internal PKI to issue certificates for its employees' smart cards. The security team wants to ensure that if a certificate is compromised, it can be revoked before its expiration date. Which component should they implement?

A key escrow service that stores private keys.

A hardware security module (HSM) to generate keys.

A registration authority (RA) to verify certificate requests.

A certificate revocation list (CRL) published by the certificate authority (CA).

Which safeguard is most effective in addressing the lack of update mechanisms in IoT devices?

Implementing a process to track and replace devices that cannot be updated

Requiring strong, unique passwords for each device

Segmenting IoT devices onto a separate network

Disabling the device's network interface

Certified Information Systems Auditor

Domain 5Objective 4

Network, Endpoint, and Data Security CISA Practice Questions (Page 5)

Part of the Protection of Information Assets domain, which accounts for 26% of the CISA exam.

35questions here

7free pages

10concepts

26%of the exam

Questions 21–25

21application · medium
A company is moving a legacy application to a public cloud IaaS environment. The security team is concerned about the responsibility for patching the operating system of the virtual machines. According to the shared responsibility model, who is responsible for patching the OS?
Select an answer first
22application · medium
A company is setting up a new internal PKI to issue certificates for its employees' smart cards. The security team wants to ensure that if a certificate is compromised, it can be revoked before its expiration date. Which component should they implement?
Select an answer first
23foundation · easy
Which wireless security protocol is considered the most secure among the following options?
Select an answer first
24foundation · easy
Which safeguard is most effective in addressing the lack of update mechanisms in IoT devices?
Select an answer first
25foundation · easy
Which mobile device management (MDM) capability is most directly used to protect corporate data if a device is lost or stolen?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CISA” is a trademark of its owner, used for identification only.

Network, Endpoint, and Data Security CISA Practice Questions (Page 5)

Questions 21–25

A company is moving a legacy application to a public cloud IaaS environment. The security team is concerned about the responsibility for patching the operating system of the virtual machines. According to the shared responsibility model, who is responsible for patching the OS?

A company is setting up a new internal PKI to issue certificates for its employees' smart cards. The security team wants to ensure that if a certificate is compromised, it can be revoked before its expiration date. Which component should they implement?

Which wireless security protocol is considered the most secure among the following options?

Which safeguard is most effective in addressing the lack of update mechanisms in IoT devices?

Which mobile device management (MDM) capability is most directly used to protect corporate data if a device is lost or stolen?

Keep studying — Protection of Information Assets