CISA UPDATED 2026 EXAM SCRIPT QUESTIONS AND
ANSWERS GRADED A+
✔✔Attribute sampling - ✔✔selecting items from a population based on a common
attribute. Used for compliance testing.
✔✔Chapter 2 - ✔✔
✔✔Steering Committee - ✔✔Appointed by senior management. Serves as a general
review board for projects and acquisitions... not involved in routine operations. The
committee should include representatives from senior management, user management,
and the IS department. Escalates issues to senior management.
✔✔Request for Proposal (RFP) - ✔✔A document distributed to software vendors
requesting their submission of a proposal to develop or provide a software product. RFP
should include: Project Overview, Key Requirements and Constraints, Scope
Limitations, Vendor questionnaire, customer references, demonstrations, etc.
✔✔Quality Assurance - ✔✔Check to verify policies are followed.
✔✔Quality Control - ✔✔Check to verify free from defects.
✔✔Bottom-up approach for policy development - ✔✔begins by defining operational-
level requirements and policies which are derived and implemented as a result of a risk
assessment.
✔✔Chapter 3 - ✔✔
✔✔OSI Model - ✔✔All People Seem To Need Dominos Pizza
✔✔Layer 7 - Application layer - ✔✔The application layer interfaces directly to and
performs common application services for the application processes.
✔✔Layer 6 - Presentation layer - ✔✔The presentation layer relieves the Application
layer of concern regarding syntactical differences in data representation within the end-
user systems. MIME encoding, data compression, encryption, and similar manipulation
of the presentation of data is done at this layer.
✔✔Layer 5 - Session layer - ✔✔The session layer provides the mechanism for
managing the dialogue between end-user application processes (By dialog we mean
that whose turn is it to transmit). It provides for either duplex or half-duplex operation.
This layer is responsible for setting up and tearing down TCP/IP sessions.
,✔✔Layer 4 - Transport layer - ✔✔The transport layer is responsible for reliable data
delivery. The transport layer provides transparent transfer of data between end users,
thus relieving the upper layers from any concern with providing reliable and cost-
effective data transfer. The transport layer controls the reliability of a given link. The
transport layer can keep track of packets and retransmit those that fail. Also addresses
packet sequencing. The best known example of a layer 4 protocol is TCP.
✔✔Layer 3 - Network layer - ✔✔The network layer provides the functional and
procedural means of transferring variable length data sequences from a source to a
destination via one or more networks while maintaining the quality of service requested
by the Transport layer. The Network layer performs network routing, flow control,
segmentation/desegmentation, and error control functions. Routers operate at this layer
-- sending data throughout the extended network
✔✔Layer 2 - Data link layer - ✔✔The data link layer provides the functional and
procedural means to transfer data between network entities and to detect and possibly
correct errors that may occur in the Physical layer. The addressing scheme is physical
which means that the addresses (MAC address) are hard-coded into the network cards
at the time of manufacture. The addressing scheme is flat. Note: The best known
example of this is Ethernet.
✔✔Layer 1 - Physical layer - ✔✔The physical layer defines all electrical and physical
specifications for devices. This includes the layout of pins, voltages, and cable
specifications. Hubs and repeaters are physical-layer devices.
✔✔Metadata - ✔✔is literally "data about data." This term refers to information about
data itself -- perhaps the origin, size, formatting or other characteristics of a data item.
✔✔Primary key - ✔✔Every database table should have one or more columns
designated as the primary key. The value this key holds should be unique for each
record in the database (e.g. Social Security number).
✔✔Foreign key - ✔✔These keys are used to create relationships between tables.
✔✔Referential integrity constraints - ✔✔ensure that a change in a primary key of one
table is automatically updated in a matching foreign key of other tables. This is done
using triggers.
✔✔Normalization - ✔✔The elimination of redundant data.
✔✔Tuple - ✔✔row in a table
✔✔Dangling Tuple - ✔✔row in a table that has lost referential integrity
, ✔✔DDL - Data Definition Language - ✔✔used for setup an removal phases, defines db
structure
✔✔DML- Data Manipulation Language - ✔✔used to insert, retrieve and modify data
✔✔Normalization - ✔✔The elimination of redundant data
✔✔Modulation - ✔✔Converting digital signal to analog.
✔✔Protocol analyzers - ✔✔are network diagnostic tools that monitor and record
network information from packets traveling in the link to which the analyzer is attached.
✔✔REPEATER - ✔✔Physical layer device that extends the network range or connects
two separate network segments together Layer 1
✔✔Routers - ✔✔are physical devices that join multiple wired or wireless networks
together. Technically, a wired or wireless router is a Layer 3 gateway, meaning that the
wired/wireless router connects networks (as gateways do), and that the router operates
at the network layer of the OSI model.
✔✔A network switch - ✔✔is a small hardware device that joins multiple computers
together within one local area network (LAN). Technically, network switches operate at
layer two (Data Link Layer - Layer 2) of the OSI model.
✔✔Network switches appear nearly identical to network hubs, but a switch... -
✔✔generally contains more "intelligence" (and a slightly higher price tag) than a hub.
Unlike hubs, network switches are capable of inspecting data packets as they are
received, determining the source and destination device of that packet, and forwarding it
appropriately. By delivering each message only to the connected device it was intended
for, a network switch conserves network bandwidth and offers generally better
performance than a hub.
✔✔A hub - ✔✔is a device that connects two segments of a single LAN. A hub is a
repeater. It provides transparent connectivity to users on all segments of the same LAN.
It is a level 1 device.
✔✔Passive hubs - ✔✔do not amplify the electrical signal of incoming packets before
broadcasting them out to the network. Active hubs, on the other hand, do perform this
amplification, as does a different type of dedicated network device called a repeater.
Some people use the terms concentrator when referring to a passive hub and multiport
repeater when referring to an active hub.
✔✔Intelligent hubs - ✔✔add extra features to an active hub that are of particular
importance to businesses. An intelligent hub typically is stackable (built in such a way
ANSWERS GRADED A+
✔✔Attribute sampling - ✔✔selecting items from a population based on a common
attribute. Used for compliance testing.
✔✔Chapter 2 - ✔✔
✔✔Steering Committee - ✔✔Appointed by senior management. Serves as a general
review board for projects and acquisitions... not involved in routine operations. The
committee should include representatives from senior management, user management,
and the IS department. Escalates issues to senior management.
✔✔Request for Proposal (RFP) - ✔✔A document distributed to software vendors
requesting their submission of a proposal to develop or provide a software product. RFP
should include: Project Overview, Key Requirements and Constraints, Scope
Limitations, Vendor questionnaire, customer references, demonstrations, etc.
✔✔Quality Assurance - ✔✔Check to verify policies are followed.
✔✔Quality Control - ✔✔Check to verify free from defects.
✔✔Bottom-up approach for policy development - ✔✔begins by defining operational-
level requirements and policies which are derived and implemented as a result of a risk
assessment.
✔✔Chapter 3 - ✔✔
✔✔OSI Model - ✔✔All People Seem To Need Dominos Pizza
✔✔Layer 7 - Application layer - ✔✔The application layer interfaces directly to and
performs common application services for the application processes.
✔✔Layer 6 - Presentation layer - ✔✔The presentation layer relieves the Application
layer of concern regarding syntactical differences in data representation within the end-
user systems. MIME encoding, data compression, encryption, and similar manipulation
of the presentation of data is done at this layer.
✔✔Layer 5 - Session layer - ✔✔The session layer provides the mechanism for
managing the dialogue between end-user application processes (By dialog we mean
that whose turn is it to transmit). It provides for either duplex or half-duplex operation.
This layer is responsible for setting up and tearing down TCP/IP sessions.
,✔✔Layer 4 - Transport layer - ✔✔The transport layer is responsible for reliable data
delivery. The transport layer provides transparent transfer of data between end users,
thus relieving the upper layers from any concern with providing reliable and cost-
effective data transfer. The transport layer controls the reliability of a given link. The
transport layer can keep track of packets and retransmit those that fail. Also addresses
packet sequencing. The best known example of a layer 4 protocol is TCP.
✔✔Layer 3 - Network layer - ✔✔The network layer provides the functional and
procedural means of transferring variable length data sequences from a source to a
destination via one or more networks while maintaining the quality of service requested
by the Transport layer. The Network layer performs network routing, flow control,
segmentation/desegmentation, and error control functions. Routers operate at this layer
-- sending data throughout the extended network
✔✔Layer 2 - Data link layer - ✔✔The data link layer provides the functional and
procedural means to transfer data between network entities and to detect and possibly
correct errors that may occur in the Physical layer. The addressing scheme is physical
which means that the addresses (MAC address) are hard-coded into the network cards
at the time of manufacture. The addressing scheme is flat. Note: The best known
example of this is Ethernet.
✔✔Layer 1 - Physical layer - ✔✔The physical layer defines all electrical and physical
specifications for devices. This includes the layout of pins, voltages, and cable
specifications. Hubs and repeaters are physical-layer devices.
✔✔Metadata - ✔✔is literally "data about data." This term refers to information about
data itself -- perhaps the origin, size, formatting or other characteristics of a data item.
✔✔Primary key - ✔✔Every database table should have one or more columns
designated as the primary key. The value this key holds should be unique for each
record in the database (e.g. Social Security number).
✔✔Foreign key - ✔✔These keys are used to create relationships between tables.
✔✔Referential integrity constraints - ✔✔ensure that a change in a primary key of one
table is automatically updated in a matching foreign key of other tables. This is done
using triggers.
✔✔Normalization - ✔✔The elimination of redundant data.
✔✔Tuple - ✔✔row in a table
✔✔Dangling Tuple - ✔✔row in a table that has lost referential integrity
, ✔✔DDL - Data Definition Language - ✔✔used for setup an removal phases, defines db
structure
✔✔DML- Data Manipulation Language - ✔✔used to insert, retrieve and modify data
✔✔Normalization - ✔✔The elimination of redundant data
✔✔Modulation - ✔✔Converting digital signal to analog.
✔✔Protocol analyzers - ✔✔are network diagnostic tools that monitor and record
network information from packets traveling in the link to which the analyzer is attached.
✔✔REPEATER - ✔✔Physical layer device that extends the network range or connects
two separate network segments together Layer 1
✔✔Routers - ✔✔are physical devices that join multiple wired or wireless networks
together. Technically, a wired or wireless router is a Layer 3 gateway, meaning that the
wired/wireless router connects networks (as gateways do), and that the router operates
at the network layer of the OSI model.
✔✔A network switch - ✔✔is a small hardware device that joins multiple computers
together within one local area network (LAN). Technically, network switches operate at
layer two (Data Link Layer - Layer 2) of the OSI model.
✔✔Network switches appear nearly identical to network hubs, but a switch... -
✔✔generally contains more "intelligence" (and a slightly higher price tag) than a hub.
Unlike hubs, network switches are capable of inspecting data packets as they are
received, determining the source and destination device of that packet, and forwarding it
appropriately. By delivering each message only to the connected device it was intended
for, a network switch conserves network bandwidth and offers generally better
performance than a hub.
✔✔A hub - ✔✔is a device that connects two segments of a single LAN. A hub is a
repeater. It provides transparent connectivity to users on all segments of the same LAN.
It is a level 1 device.
✔✔Passive hubs - ✔✔do not amplify the electrical signal of incoming packets before
broadcasting them out to the network. Active hubs, on the other hand, do perform this
amplification, as does a different type of dedicated network device called a repeater.
Some people use the terms concentrator when referring to a passive hub and multiport
repeater when referring to an active hub.
✔✔Intelligent hubs - ✔✔add extra features to an active hub that are of particular
importance to businesses. An intelligent hub typically is stackable (built in such a way
