Home / Isaca / CISA

Isaca CISA Practice Test - Questions Answers, Page 87

Question list

List of questions

Question 861

(0)

Management receives information indicating a high level of risk associated with potential flooding near the organization's data center within the next few years. As a result, a decision has been mad

Question 862

(0)

Which of the following constitutes an effective detective control in a distributed processing environment?

Question 863

(0)

Which of the following is the BEST disposal method for flash drives that previously stored confidential data?

Question 864

(0)

During a follow-up engagement, an IS auditor confirms evidence of a problem that was not an issue in the original audit. Which of the following is the auditor's BEST course of action?

Question 865

(0)

What should be the PRIMARY focus during a review of a business process improvement project?

Question 866

(0)

Which of the following is MOST important to the effectiveness of smoke detectors installed in a data processing facility?

Question 867

(0)

Which of the following BEST indicates a need to review an organization's information security policy?

Question 868

(0)

An IS auditor is evaluating the log management system for an organization with devices and systems in multiple geographic locations. Which of the following is MOST important for the auditor to verif

Question 869

(0)

An organization is ready to implement a new IT solution consisting of multiple modules. The last module updates the processed data into the database. Which of the following findings should be of MOS

Question 870

(0)

Which of the following observations regarding change management should be considered the MOST serious risk by an IS auditor?

Question 861

Management receives information indicating a high level of risk associated with potential flooding near the organization's data center within the next few years. As a result, a decision has been made to move data center operations to another facility on higher ground. Which approach has been adopted?

Risk acceptance

Risk transfer

Risk reduction

Risk avoidance

Show Answer Comment (0)

Question 862

Which of the following constitutes an effective detective control in a distributed processing environment?

A log of privileged account use is reviewed.

A disaster recovery plan (DRP)4% in place for the entire system.

User IDs are suspended after three incorrect passwords have been entered.

Users are required to request additional access via an electronic mail system.

Show Answer Comment (0)

Question 863

Which of the following is the BEST disposal method for flash drives that previously stored confidential data?

Destruction

Degaussing

Cryptographic erasure

Overwriting

Show Answer Comment (0)

Question 864

During a follow-up engagement, an IS auditor confirms evidence of a problem that was not an issue in the original audit. Which of the following is the auditor's BEST course of action?

Include the evidence as part of a future audit.

Report only on the areas within the scope of the follow-up.

Report the risk to management in the follow-up report.

Expand the follow-up scope to include examining the evidence.

Show Answer Comment (0)

Question 865

What should be the PRIMARY focus during a review of a business process improvement project?

Business project plan

Continuous monitoring plans

The cost of new controls

Business impact

Show Answer Comment (0)

Question 866

Which of the following is MOST important to the effectiveness of smoke detectors installed in a data processing facility?

Detectors trigger audible alarms when activated.

Detectors have the correct industry certification.

Detectors are linked to dry pipe fire suppression systems.

Detectors are linked to wet pipe fire suppression systems.

Show Answer Comment (0)

Question 867

Which of the following BEST indicates a need to review an organization's information security policy?

High number of low-risk findings in the audit report

Increasing exceptions approved by management

Increasing complexity of business transactions

Completion of annual IT risk assessment

Show Answer Comment (0)

Question 868

An IS auditor is evaluating the log management system for an organization with devices and systems in multiple geographic locations. Which of the following is MOST important for the auditor to verify?

Log files are reviewed in multiple locations.

Log files are concurrently updated.

Log files are encrypted and digitally signed.

Log files of the servers are synchronized.

Show Answer Comment (0)

Question 869

An organization is ready to implement a new IT solution consisting of multiple modules. The last module updates the processed data into the database. Which of the following findings should be of MOST concern to the IS auditor?

Absence of a formal change approval process

Lack of input validation

Use of weak encryption

Lack of a data dictionary

Show Answer Comment (0)