Question 991 · 1459 in bank
Which of the following is MOST important to include in forensic data collection and preservation procedures?
Show answer
Answer: A
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is MOST important to include in forensic data collection and preservation procedures?
Answer: A
Which of the following is MOST important for an effective control self-assessment (CSA) program?
Answer: D
An effective control self-assessment (CSA) program is a critical tool for organizations to ensure that internal controls are working as intended and are effective in mitigating risk. To achieve this, the CSA program must be well-designed and implemented with a clear focus on the organization's business processes, risks, and control objectives. Among the options provided, the most important aspect for an effective control self-assessment program is understanding the business process (option D). Option A: Determining the scope of the assessment is important, but it is not the most important factor in an effective CSA program. A well-defined scope ensures that the assessment is focused and targeted, but understanding the business process is more critical to ensuring that the assessment is meaningful and relevant to the organization's objectives.
Source: Adapted from community discussion — 3008
Which of the following is the PRIMARY protocol for protecting outbound content from tampering and eavesdropping?
Answer: D
While Secure Shell (SSH) (option B) is also a secure communication protocol commonly used for remote access and secure file transfer, it is primarily designed for interactive terminal sessions and secure file transfer within a trusted network environment. TLS, on the other hand, is specifically designed for securing communication over untrusted networks, such as the internet, and is more commonly used for protecting outbound content from tampering and eavesdropping. Therefore, TLS is the PRIMARY protocol for this purpose.
Source: Adapted from community discussion — Swallows
Which of the following security risks can be reduced by a properly configured network firewall?
Answer: C
An IS auditor learns the organization has experienced several server failures in its distributed environment. Which of the following is the BEST recommendation to limit the potential impact of server failures in the future?
Answer: B
Clustering involves grouping multiple servers together to work as a unified system, providing redundancy and failover capabilities. By implementing clustering, the organization can distribute the workload across multiple servers and ensure high availability. In the event of a server failure, the workload can automatically be shifted to other servers in the cluster, minimizing downtime and maintaining service continuity.
Source: Adapted from community discussion — necoll007
Which of the following is the BEST source of information for assessing the effectiveness of IT process monitoring?
Answer: A
Performance data is considered the best source of information for assessing the effectiveness of IT process monitoring because it provides objective and quantifiable evidence of the efficiency and effectiveness of the processes being monitored. Performance data can include metrics such as processing times, resource utilization, error rates, and more. By analyzing performance data, IT teams can identify areas where processes can be improved, determine if IT resources are being used optimally, and make data-driven decisions about process monitoring and improvement. In contrast, participative management techniques, quality assurance (QA) reviews, and real-time audit software may provide useful information, but performance data is the most direct and tangible measure of process effectiveness.
Source: Adapted from community discussion — zebree
Which of the following is an example of a corrective control?
Answer: C
Which of the following metrics would BEST measure the agility of an organization's IT function?
Answer: C
Which of the following BEST enables system resiliency for an e-commerce organization that requires a low recovery time objective (RTO) and a low recovery point objective (RPO)?
Answer: B
Which of the following is the MAJOR advantage of automating internal controls?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 991. 1459 questions available.
Version 1.0.0. How we source questions