Home / Isaca / CISA

Isaca CISA Practice Test - Questions Answers, Page 88

Question list

List of questions

Question 871

(0)

Which of the following is MOST important when creating a forensic image of a hard drive?

Question 872

(0)

Which of the following is the MOST efficient control to reduce the risk associated with a systems administrator having network administrator responsibilities?

Question 873

(0)

A web application is developed in-house by an organization. Which of the following would provide the BEST evidence to an IS auditor that the application is secure from external attack?

Question 874

(0)

Which of the following is the GREATEST benefit of adopting an Agile audit methodology?

Question 875

(0)

The PRIMARY objective of a follow-up audit is to:

Question 876

(0)

An IS auditor can BEST evaluate the business impact of system failures by:

Question 877

(0)

Which of the following is a threat to IS auditor independence?

Question 878

(0)

Which of the following findings related to segregation of duties should be of GREATEST concern to an IS auditor?

Question 879

(0)

When reviewing hard disk utilization reports, an IS auditor observes that utilization is routinely above 95%. Which of the following should be the GREATEST concern to the IS auditor?

Question 880

(0)

Which of the following would be of GREATEST concern to an IS auditor reviewing an IT-related customer service project?

Question 871

Which of the following is MOST important when creating a forensic image of a hard drive?

Requiring an independent third party be present while imaging

Securing a backup copy of the hard drive

Generating a content hash of the hard drive

Choosing an industry-leading forensics software tool

Show Answer Comment (0)

Question 872

Which of the following is the MOST efficient control to reduce the risk associated with a systems administrator having network administrator responsibilities?

The administrator must obtain temporary access to make critical changes.

The administrator will need to request additional approval for critical changes.

The administrator must sign a due diligence agreement.

The administrator will be subject to unannounced audits.

Show Answer Comment (0)

Question 873

A web application is developed in-house by an organization. Which of the following would provide the BEST evidence to an IS auditor that the application is secure from external attack?

Web application firewall (WAF) implementation

Penetration test results

Code review by a third party

Database application monitoring logs

Show Answer Comment (0)

Question 874

Which of the following is the GREATEST benefit of adopting an Agile audit methodology?

Better ability to address key risks

Less frequent client interaction

Annual cost savings

Reduced documentation requirements

Show Answer Comment (0)

Question 875

The PRIMARY objective of a follow-up audit is to:

assess the appropriateness of recommendations.

verify compliance with policies.

evaluate whether the risk profile has changed.

determine adequacy of actions taken on recommendations.

Show Answer Comment (0)

Question 876

An IS auditor can BEST evaluate the business impact of system failures by:

assessing user satisfaction levels.

interviewing the security administrator.

analyzing equipment maintenance logs.

reviewing system-generated logs.

Show Answer Comment (0)

Question 877

Which of the following is a threat to IS auditor independence?

Internal auditors share the audit plan and control test plans with management prior to audit commencement.

Internal auditors design remediation plans to address control gaps identified by internal audit.

Internal auditors attend IT steering committee meetings.

Internal auditors recommend appropriate controls for systems in development.

Show Answer Comment (0)

Question 878

Which of the following findings related to segregation of duties should be of GREATEST concern to an IS auditor?

The person who tests source code also approves changes.

The person who administers servers is also part of the infrastructure management team.

The person who creates new user accounts also modifies user access levels.

The person who edits source code also has write access to production.

Show Answer Comment (0)

Question 879

When reviewing hard disk utilization reports, an IS auditor observes that utilization is routinely above 95%. Which of the following should be the GREATEST concern to the IS auditor?

Availability

Consistency

Denial of service (DoS) attacks

Data security

Show Answer Comment (0)