ISACA Glossary | Practice Test / Quiz / MCQs

Home > CISA (Certified Information Systems Auditor) > Quizzes > ISACA Glossary

ISACA Glossary

Fast practice, instant feedback. Timer auto-submits when time’s up.

Avg score: 34% • Most missed: “Request for comments (RFC)”

ISACA is an international professional association focused on IT governance. It is known as the Information Systems Audit and Control.

ISACA Glossary

Time left 00:00

25 Questions

1. Waterfall development

Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.A data-mining algorithm to cluster, classify or group N objects based on their attributes or features into K number of groups (so-called clusters)Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.

2. Virtual organizations

Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.A data-mining algorithm to cluster, classify or group N objects based on their attributes or features into K number of groups (so-called clusters)Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.

3. Capacity stress testing

Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.A data-mining algorithm to cluster, classify or group N objects based on their attributes or features into K number of groups (so-called clusters)Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.

4. K-means clustering

5. Residual security risk

Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.The remaining probability of an event occurring and its consequence that still exists after a risk response has been implemented

6. Requirements elicitation

A technique used to gather knowledge or information to proactively identify and record customer and end user needsOrganization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.

7. Wi-Fi Protected Access II (WPA2)

Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.Wireless security protocol that supports 802.11i encryption standards to provide greater security. This protocol uses Advanced Encryption Standards (AES) and Temporal Key Integrity Protocol (TKIP) for stronger encryption.

8. Virtual reality

Computer-generated simulations that present the user with an altered reality. VR users typically wear a headset and hold a hand controller while they experience an immersive recreation of a real or imaginary environment that masks their actual environment.Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.

9. Organizational structure

Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.A component of a governance system. Includes the enterprise and its structures, hierarchies and dependencies. Scope Notes: Example: Steering committeeAlso known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.

10. Graphics processing unit

Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Special processing unit made to render high-quality images and video filesOrganization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.

11. Forensic examination

Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.The process of collecting, assessing, classifying and documenting digital evidence to assist in the identification of an offender and the method of compromise.

12. World Wide Web (WWW)

Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.A sub network of the Internet through which information is exchanged by text, graphics, audio and video.

13. Downtime report

A report that identifies the elapsed time when a computer is not operating correctly because of machine failure.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.

14. Escrow agreement

A legal arrangement whereby an asset (often money, but sometimes other property such as art, a deed of title, web site, software source code or a cryptographic key) is delivered to a third party (called an escrow agent) to be held in trust or otherwise pending a contingency or the fulfillment of a condition or conditions in a contract.. Scope Notes: Upon the occurrence of the escrow agreement, the escrow agent will deliver the asset to the proper recipient; otherwise the escrow agent is bound by his/her fiduciary duty to maintain the escrow account. Source code escrow means deposit of the source code for the software into an account held by an escrow agent. Escrow is typically requested by a party licensing software (e.g., licensee or buyer), to ensure maintenance of the software. The software source code is released by the escrow agent to the licensee if the licensor (e.g., seller or contractor) files for bankruptcy or otherwise fails to maintain and update the software as promised in the software license agreement.Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.

15. Information technology (IT)

Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.The hardware, software, communication and other facilities used to input, store, process, transmit and output data in whatever form.

16. Attack

An actual occurrence of an adverse eventTesting an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.

17. X.500

Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.A standard that defines how global directories should be structured. Scope Notes: X.500 directories are hierarchical with different levels for each category of information, such as country, state and city.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.

18. Hypercall

A stopgap between a hypervisor and the host to filter and control privileged operationsOrganization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.

19. Distributed denial-of-service attack (DDoS)

20. Spear phishing

Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.An attack designed to entice specific individuals or groups to obtain important information. Where social engineering techniques are used to masquerade as a trusted party to obtain important information, such as passwords from the victim.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.

21. Appraisal team member (ATM)

Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.The role of the person(s) who are responsible for performing the activities as assigned and identified in the appraisal plan. ATMs must meet the minimum requirements for experience and training/certification as defined by ISACA in the CMMI V2.0 Appraisal Method Definition Document.

22. A recorded range of expected results that can be achieved by following a process

Process descriptionTesting an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.

23. Feature

The machine-learning expression for a piece of measurable information about something; if researchers store the age, annual income and weight of a set of people, they are storing three features about them.Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.

24. Binary

Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.The base 2 number system (2n). Permissible digits are 0 and 1.

25. IEEE 802.11

Organization that has no official physical site presence and is made up of diverse, geographically dispersed or mobile employees.Also known as traditional development, a procedure-focused development cycle with formal sign-off at the completion of each level.A family of specifications developed by the Institute of Electrical and Electronics Engineers (IEEE) for wireless local area network (WLAN) technology. 802.11 specifies an over-the-air interface between a wireless client and a base station, or between two wireless clients.Testing an application with large quantities of data to evaluate its performance during peak periods. Also called volume testing.

⚡ Recently practiced quizzes in this topic

Live quiz activity

CISA Domain 1: Information Systems Auditing Process CISA Glossary CISA Domain 4: Information Systems Operations and Business Resilience CISA Domain 3: Information Systems Acquisition, Development, and Implementation CISA Domain 5: Protection of Information Asset CISA Domain 2: Governance and Management of IT

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know? Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com