CISA practice questions 1,041–1,050

1. Question 1041 · 1459 in bank

   Which of the following should be of GREATEST concern to an IS auditor planning to employ data analytics in an upcoming audit?

   • AThere is no documented data model.
   • BAvailable data is incomplete.
   • CData fields are used for multiple purposes.
   • DData is from the previous reporting period.

   Show answer

   Answer: B

   Next question

2. Question 1042 · 1459 in bank

   Which of the following would be of MOST concern during an audit of an end-user computing (EUC) system containing sensitive information?

   • AAudit logging is not available.
   • BSystem data is not protected.
   • CThe system's anti-virus software is outdated.
   • DService level agreements (SLAs) are undefined.

   Show answer

   Answer: B

   Explanation

   Sensitive information must be protected from unauthorized access, modification, or destruction. If system data is not protected, it may be vulnerable to unauthorized access or modification. Audit logging is important but does not directly relate to the protection of sensitive information.

   Source: Adapted from community discussion — EBTURK

   Next question

3. Question 1043 · 1459 in bank

   Which of the following yields the HIGHEST level of system availability?

   • ABackups
   • BReal-time replication
   • CCloud storage
   • DHot swaps

   Show answer

   Answer: D

   Next question

4. Question 1044 · 1459 in bank

   Which of the following is a characteristic of a single mirrored data center used for disaster recovery?

   • AData replication to the mirrored site should continue after failover.
   • BThe mirrored site may create brief interruptions noticeable to users.
   • CReal-time data replication occurs from the production site.
   • DThe mirrored data center does not require staffing.

   Show answer

   Answer: C

   Next question

5. Question 1045 · 1459 in bank

   Which of the following is the BEST way to address potential data privacy concerns associated with inadvertent disclosure of machine identifier information contained within security logs?

   • AOnly collect logs from servers classified as business critical.
   • BLimit the use of logs to only those purposes for which they were collected.
   • CLimit log collection to only periods of increased security activity.
   • DRestrict the transfer of log files from host machine to online storage.

   Show answer

   Answer: B

   Next question

6. Question 1046 · 1459 in bank

   Which of the following is the PRIMARY objective of baselining the IT control environment?

   • ADefine process and control ownership.
   • BEnsure IT security strategy and policies are effective.
   • CAlign IT strategy with business strategy.
   • DDetect control deviations.

   Show answer

   Answer: D

   Next question

7. Question 1047 · 1459 in bank

   Which of the following is the PRIMARY purpose of conducting an IS audit follow-up?

   • ATo align IS audit activities with business objectives
   • BTo help management prioritize related risk mitigation activities
   • CTo determine the effectiveness of management's responses to risk
   • DTo obtain agreement with management on action plan status

   Show answer

   Answer: C

   Next question

8. Question 1048 · 1459 in bank

   Which of the following is the MOST effective control for protecting the confidentiality and integrity of data stored unencrypted on virtual machines?

   • AMonitor access to stored images and snapshots of virtual machines
   • BRestrict access to images and snapshots of virtual machines
   • CReview logical access controls on virtual machines regularly
   • DLimit creation of virtual machine images and snapshots

   Show answer

   Answer: B

   Next question

9. Question 1049 · 1459 in bank

   Which of the following is the MOST likely reason an organization would use Platform as a Service (PaaS)?

   • ATo operate third-party hosted applications
   • BTo install and manage operating systems
   • CTo establish a network and security architecture
   • DTo develop and integrate its applications

   Show answer

   Answer: D

   Explanation

   PaaS provides a platform that includes the infrastructure, runtime environment, and development tools needed for application development. It allows organizations to focus on developing their applications without worrying about the underlying infrastructure, operating systems, or runtime environments. This makes it an ideal choice for organizations looking to develop and integrate their applications in a flexible, scalable, and cost-effective manner.

   Source: Adapted from community discussion — 3008

   Next question

10. Question 1050 · 1459 in bank

    Which of the following would be of GREATEST concern when reviewing an organization's security information and event management (SIEM) solution?

    • ASIEM reporting is ad hoc.
    • BSIEM reporting is customized.
    • CSIEM configuration is reviewed annually.
    • DThe SIEM is decentralized.

    Show answer

    Answer: D

    Explanation

    D. The SIEM is decentralized. The greatest concern when reviewing an organization's security information and event management (SIEM) solution would be if the SIEM is decentralized (Option D). A decentralized SIEM could lead to fragmented data, incomplete visibility, and difficulties in effectively monitoring and responding to security incidents. A centralized SIEM allows for consistent monitoring, analysis, and response across the organization's entire infrastructure, enhancing security and reducing blind spots.

    Source: Adapted from community discussion — lsiau76

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 1041. 1459 questions available.