Home / Isaca / CISA

Isaca CISA Practice Test - Questions Answers, Page 89

Question list

List of questions

Question 881

(0)

An IS auditor discovers that a developer has used the same key to grant access to multiple applications making calls to an application programming interface (API). Which of the following is the BEST

Question 882

(0)

In an area susceptible to unexpected increases in electrical power, which of the following would MOST effectively protect the system?

Question 883

(0)

An organization plans to centrally decommission end-of-life databases and migrate the data to the latest model of hardware. Which of the following BEST ensures data integrity is preserved during the

Question 884

(0)

During a closing meeting, the IT manager disagrees with a valid audit finding presented by the IS auditor and requests the finding be excluded from the final report. Which of the following is the au

Question 885

(0)

During which IT project phase is it MOST appropriate to conduct a benefits realization analysis?

Question 886

(0)

When planning a review of IT governance, an IS auditor is MOST likely to:

Question 887

(0)

Which of the following is the BEST indicator that a third-party vendor adheres to the controls required by the organization?

Question 888

(0)

Which of the following would BEST prevent an arbitrary application of a patch?

Question 889

(0)

Which of the following would be MOST important to include in an IS audit report?

Question 890

(0)

At the end of each business day, a business-critical application generates a report of financial transac-tions greater than a certain value, and an employee then checks these transactions for errors

Question 881

An IS auditor discovers that a developer has used the same key to grant access to multiple applications making calls to an application programming interface (API). Which of the following is the BEST recommendation to address this situation?

Replace the API key with time-limited tokens that grant least privilege access.

Authorize the API key to allow read-only access by all applications.

Implement a process to expire the API key after a previously agreed-upon period of time.

Coordinate an API key rotation exercise with all impacted application owners.

Show Answer Comment (0)

Question 882

In an area susceptible to unexpected increases in electrical power, which of the following would MOST effectively protect the system?

Generator

Voltage regulator

Circuit breaker

Alternate power supply line

Show Answer Comment (0)

Question 883

An organization plans to centrally decommission end-of-life databases and migrate the data to the latest model of hardware. Which of the following BEST ensures data integrity is preserved during the migration?

Reconciling sample data to most recent backups

Obfuscating confidential data

Encrypting the data

Comparing checksums

Show Answer Comment (0)

Question 884

During a closing meeting, the IT manager disagrees with a valid audit finding presented by the IS auditor and requests the finding be excluded from the final report. Which of the following is the auditor's BEST course of action?

Request that the IT manager be removed from the remaining meetings and future audits.

Modify the finding to include the IT manager's comments and inform the audit manager of the changes.

Remove the finding from the report and continue presenting the remaining findings.

Provide the evidence which supports the finding and keep the finding in the report.

Show Answer Comment (0)

Question 885

During which IT project phase is it MOST appropriate to conduct a benefits realization analysis?

Post-implementation review phase

Final implementation phase

User acceptance testing (UAT) phase

Design review phase

Show Answer Comment (0)

Question 886

When planning a review of IT governance, an IS auditor is MOST likely to:

assess whether business process owner responsibilities are consistent.

obtain information about the control framework adopted by management.

examine audit committee minutes for IT-related controls.

define key performance indicators (KPIs).

Show Answer Comment (0)

Question 887

Which of the following is the BEST indicator that a third-party vendor adheres to the controls required by the organization?

Review of monthly performance reports submitted by the vendor

Certifications maintained by the vendor

Regular independent assessment of the vendor

Substantive log file review of the vendor's system

Show Answer Comment (0)

Question 888

Which of the following would BEST prevent an arbitrary application of a patch?

Database access control

Established maintenance windows

Network based access controls

Change management

Show Answer Comment (0)

Question 889

Which of the following would be MOST important to include in an IS audit report?

Observations not reported as findings due to inadequate evidence

The roadmap for addressing the various risk areas

The level of unmitigated risk along with business impact

Specific technology solutions for each audit observation

Show Answer Comment (0)

Question 890

At the end of each business day, a business-critical application generates a report of financial transac-tions greater than a certain value, and an employee then checks these transactions for errors. What type of control is in place?

Detective

Preventive

Corrective

Deterrent

Show Answer Comment (0)

Total 1.198 questions