Home / Isaca / CISA

Isaca CISA Practice Test - Questions Answers, Page 93

Question list

List of questions

Question 921

(0)

Which of the following would be of GREATEST concern to an IS auditor reviewing the resiliency of an organizational network that has two internet connections?

Question 922

(0)

An IS auditor wants to inspect recent events in a system to observe failed authentications and password changes. Which of the following is the MOST appropriate method to use for this purpose?

Question 923

(0)

How is nonrepudiation supported within a public key infrastructure (PKI) environment?

Question 924

(0)

Which of the following tests is MOST likely to detect an error in one subroutine resulting from a recent change in another subroutine?

Question 925

(0)

Which of the following is the GREATEST risk of project dashboards being set without sufficiently defined criteria?

Question 926

(0)

Which of the following should an IS auditor recommend be done FIRST when an organization is planning to implement an IT compliance program?

Question 927

(0)

An IS auditor has been asked to provide support to the control self-assessment (CSA) program. Which of the following BEST represents the scope of the auditor's role in the program?

Question 928

(0)

Which of the following is a PRIMARY function of an intrusion detection system (IDS)?

Question 929

(0)

Who should be the FIRST to evaluate an audit report prior to issuing it to the project steering committee?

Question 930

(0)

An IS auditor is reviewing database fields updated in real-time and displayed through other applications in multiple organizational functions. When validating business approval for these various use

Question 921

Which of the following would be of GREATEST concern to an IS auditor reviewing the resiliency of an organizational network that has two internet connections?

Network capacity testing has not been performed.

The business continuity plan (BCP) has not been tested in the past six months.

Non-critical applications are also connected to both connections.

Both connections are from the same provider.

Show Answer Comment (0)

Question 922

An IS auditor wants to inspect recent events in a system to observe failed authentications and password changes. Which of the following is the MOST appropriate method to use for this purpose?

Penetration testing

Authenticated scanning

Change management records

System log review

Show Answer Comment (0)

Question 923

How is nonrepudiation supported within a public key infrastructure (PKI) environment?

Through the use of elliptical curve cryptography on transmitted messages

Through the use of a certificate issued by a certificate authority (CA)

Through the use of private keys to decrypt data received by a user

Through the use of enterprise key management systems

Show Answer Comment (0)

Question 924

Which of the following tests is MOST likely to detect an error in one subroutine resulting from a recent change in another subroutine?

User acceptance testing (UAT)

Black-box testing

Regression testing

Stress testing

Show Answer Comment (0)

Question 925

Which of the following is the GREATEST risk of project dashboards being set without sufficiently defined criteria?

Adverse findings from internal and external auditors

Lack of project portfolio status oversight

Lack of alignment of project status reports

Inadequate decision-making and prioritization

Show Answer Comment (0)

Question 926

Which of the following should an IS auditor recommend be done FIRST when an organization is planning to implement an IT compliance program?

Identify staff training needs related to compliance requirements.

Analyze historical compliance-related audit findings.

Research and purchase an industry-recognized IT compliance tool

Identify applicable laws, regulations, and standards.

Show Answer Comment (0)

Question 927

An IS auditor has been asked to provide support to the control self-assessment (CSA) program. Which of the following BEST represents the scope of the auditor's role in the program?

The auditor should act as a program facilitator.

The auditor should focus on improving process productivity

The auditor should perform detailed audit procedures

The auditor's presence replaces the audit responsibilities of other team members.

Show Answer Comment (0)

Question 928

Which of the following is a PRIMARY function of an intrusion detection system (IDS)?

Predicting an attack before it occurs

Alerting when a scheduled backup job fails

Blocking malicious network traffic

Warning when executable programs are modified

Show Answer Comment (0)

Question 929

Who should be the FIRST to evaluate an audit report prior to issuing it to the project steering committee?

IS audit manager

Audit committee

Business owner

Project sponsor

Show Answer Comment (0)

An IS auditor is reviewing database fields updated in real-time and displayed through other applications in multiple organizational functions. When validating business approval for these various use cases, which of the following sources of information would be the BEST starting point?

Network map from the network administrator

Historical database change log records

List of integrations from the database administrator (DBA)

Business process flow from management

Show Answer Comment (0)

Total 1.198 questions