An organization allows employees to use their personal mobile devices to access corporate email. The security team wants to ensure that if a device is compromised, the corporate email data can be removed without affecting personal data. Which control should they implement?

Require the user to change their email password immediately.

Use mobile device management (MDM) to perform a full remote wipe of the device.

Use mobile application management (MAM) to containerize corporate email and data.

Enable encryption on the device.

A company stores sensitive customer data in a cloud object storage service. The security team wants to prevent unauthorized access to the data and also ensure that the data is protected if the storage media is stolen. Which combination of controls should they implement?

Use a VPN to access the storage service.

Use a DLP policy that scans the storage for sensitive data.

Enable versioning and use multi-factor authentication (MFA).

Enable server-side encryption and use identity-based access policies.

In the cloud shared responsibility model, which of the following is typically the customer's responsibility?

Physical security of the data center

Replacing failed hardware in the cloud data center

Patching the guest operating system of a virtual machine

Maintaining the hypervisor software

Which of the following is a common security challenge specific to Internet of Things (IoT) devices?

Weak default credentials that are often not changed

High processing power that enables brute-force attacks

Which access control measure is most effective in preventing unauthorized users from connecting to a wireless network?

Setting a short DHCP lease time

Implementing WPA3-Enterprise with 802.1X authentication

Certified Information Systems Auditor

Domain 5Objective 4

Network, Endpoint, and Data Security CISA Practice Questions (Page 7)

Part of the Protection of Information Assets domain, which accounts for 26% of the CISA exam.

35questions here

7free pages

10concepts

26%of the exam

Questions 31–35

31application · medium
An organization allows employees to use their personal mobile devices to access corporate email. The security team wants to ensure that if a device is compromised, the corporate email data can be removed without affecting personal data. Which control should they implement?
Select an answer first
32application · medium
A company stores sensitive customer data in a cloud object storage service. The security team wants to prevent unauthorized access to the data and also ensure that the data is protected if the storage media is stolen. Which combination of controls should they implement?
Select an answer first
33foundation · easy
In the cloud shared responsibility model, which of the following is typically the customer's responsibility?
Select an answer first
34foundation · easy
Which of the following is a common security challenge specific to Internet of Things (IoT) devices?
Select an answer first
35foundation · easy
Which access control measure is most effective in preventing unauthorized users from connecting to a wireless network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CISA” is a trademark of its owner, used for identification only.