Home / Isaca / CISA

Isaca CISA Practice Test - Questions Answers, Page 75

Question list

List of questions

Question 741

(0)

During an organization's implementation of a data loss prevention (DLP) solution, which of the following activities should be completed FIRST?

Question 742

(0)

A new regulation has been enacted that mandates specific information security practices for the protection of customer data. Which of the following is MOST useful for an IS auditor to review when au

Question 743

(0)

An external attacker spoofing an internal Internet Protocol (IP) address can BEST be detected by which of the following?

Question 744

(0)

During the audit of an enterprise resource planning (ERP) system, an IS auditor found an applicationpatch was applied to the production environment. It is MOST important for the IS auditor to verif

Question 745

(0)

Which of the following would be of GREATEST concern to an IS auditor reviewing the feasibility study for a new application system?

Question 746

(0)

When an intrusion into an organization's network is detected, which of the following should be done FIRST?

Question 747

(0)

Data from a system of sensors located outside of a network is received by the open ports on a server. Which of the following is the BEST way to ensure the integrity of the data being collected from

Question 748

(0)

Which of the following provides the BEST assurance that vendor-supported software remains up to date?

Question 749

(0)

If a recent release of a program has to be backed out of production, the corresponding changes within the delta version of the code should be:

Question 750

(0)

A senior IS auditor suspects that a PC may have been used to perpetrate fraud in a finance department. The auditor should FIRST report this suspicion to:

Question 741

During an organization's implementation of a data loss prevention (DLP) solution, which of the following activities should be completed FIRST?

Configuring reports

Configuring rule sets

Enabling detection points

Establishing exceptions workflow

Show Answer Comment (0)

A new regulation has been enacted that mandates specific information security practices for the protection of customer data. Which of the following is MOST useful for an IS auditor to review when auditing against the regulation?

Compliance gap analysis

Customer data protection roles and responsibilities

Customer data flow diagram

Benchmarking studies of adaptation to the new regulation

Show Answer Comment (0)

Question 743

An external attacker spoofing an internal Internet Protocol (IP) address can BEST be detected by which of the following?

Comparing the source address to the domain name server (DNS) entry

Using static IP addresses for identification

Comparing the source address to the interface used as the entry point

Using a state table to compare the message states of each packet as it enters the system

Show Answer Comment (0)

Question 744

During the audit of an enterprise resource planning (ERP) system, an IS auditor found an applicationpatch was applied to the production environment. It is MOST

important for the IS auditor to verify approval from the:

information security officer.

system administrator.

information asset owner.

project manager.

Show Answer Comment (0)

Question 745

Which of the following would be of GREATEST concern to an IS auditor reviewing the feasibility study for a new application system?

Security requirements have not been defined.

Conditions under which the system will operate are unclear.

The business case does not include well-defined strategic benefits.

System requirements and expectations have not been clarified.

Show Answer Comment (0)

Question 746

When an intrusion into an organization's network is detected, which of the following should be done FIRST?

Notify senior management.

Block all compromised network nodes.

Identify nodes that have been compromised.

Contact law enforcement.

Show Answer Comment (0)

Question 747

Data from a system of sensors located outside of a network is received by the open ports on a server. Which of the following is the BEST way to ensure the integrity of the data being collected from the sensor system?

Implement network address translation on the sensor system.

Route the traffic from the sensor system through a proxy server.

Hash the data that is transmitted from the sensor system.

Transmit the sensor data via a virtual private network (VPN) to the server.

Show Answer Comment (0)

Question 748

Which of the following provides the BEST assurance that vendor-supported software remains up to date?

Release and patch management

Licensing agreement and escrow

Software asset management

Version management

Show Answer Comment (0)

Question 749

If a recent release of a program has to be backed out of production, the corresponding changes within the delta version of the code should be:

filed in production for future reference in researching the problem.

applied to the source code that reflects the version in production.

eliminated from the source code that reflects the version in production.

reinstalled when replacing the version back into production.

Show Answer Comment (0)

Question 750

A senior IS auditor suspects that a PC may have been used to perpetrate fraud in a finance department. The auditor should FIRST report this suspicion to:

the audit committee.

audit management.

auditee line management.

the police.

Show Answer Comment (0)

Total 1.198 questions