Question 1101 · 1459 in bank
Which of the following would provide the BEST evidence of an IT strategy committee's effectiveness?
Show answer
Answer: C
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following would provide the BEST evidence of an IT strategy committee's effectiveness?
Answer: C
An IS auditor is reviewing the business requirements for the deployment of a new website. Which of the following cryptographic systems would provide the BEST evidence of secure communications on the Internet?
Answer: A
An IS auditor is performing a follow-up audit for findings identified in an organization's user provisioning process. Which of the following is the MOST appropriate population to sample from when testing for remediation?
Answer: A
When performing a follow-up audit for findings identified in an organization's user provisioning process, the most appropriate population to sample from when testing for remediation would be: A. All users provisioned after management resolved the audit issue This population includes users provisioned after the management took action to address the audit findings. Sampling from this population helps assess whether the remediation efforts have been effective and whether the user provisioning process is now in compliance with the desired controls.
Source: Adapted from community discussion — FAGFUR
Which of the following is the BEST method to prevent wire transfer fraud by bank employees?
Answer: B
System-enforced dual control is the BEST method to prevent wire transfer fraud by bank employees. Dual control involves requiring the involvement of two or more individuals to complete a critical or sensitive task. In the context of wire transfers, system-enforced dual control would mean that two or more authorized individuals are required to approve and execute a wire transfer. This control helps mitigate the risk of fraud because it ensures that no single individual has the ability to initiate and complete a wire transfer independently. Even if one person's credentials are compromised, an additional layer of approval is needed, adding an extra barrier to fraudulent activities.
Source: Adapted from community discussion — FAGFUR
Which of the following would be MOST useful to an organization planning to adopt a public cloud computing model?
Answer: A
While an independent control assessment (option C) could also be valuable for assessing the security and compliance posture of the CSP, SLA performance metrics are more directly relevant to evaluating the quality of service delivery and meeting the organization's operational needs in a public cloud environment.
Source: Adapted from community discussion — Swallows
Which of the following is the BEST performance indicator for the effectiveness of an incident management program?
Answer: D
B: Number Incidents Reported. Incident management is to ensure that incidents are identified, investigated, root causes identified, and controls are put in place to mitigate recurrence. Quick resolution is of no important if critical incidences are not identified and reported.
Source: Adapted from community discussion — JayKema
Which of the following is the MOST effective control to mitigate unintentional misuse of authorized access?
Answer: B
In order to be useful, a key performance indicator (KPI) MUST:
Answer: C
In order to be useful, a key performance indicator (KPI) MUST have a target value. A target value provides a benchmark or goal that the organization aims to achieve. It serves as a reference point against which actual performance can be compared. The presence of a target value helps organizations assess their performance, identify areas for improvement, and make informed decisions.
Source: Adapted from community discussion — FAGFUR
Which of the following should be of GREATEST concern to an IS auditor reviewing an organization's IT process performance reports over the last quarter?
Answer: B
Which of the following is MOST important to have in place to build consensus among key stakeholders on the cost-effectiveness of IT?
Answer: A
To build consensus among key stakeholders on the cost-effectiveness of IT, having IT project governance and management in place is MOST important. Effective IT project governance and management ensure that IT initiatives are aligned with organizational goals, deliver value, and are executed efficiently. It involves processes for decision-making, resource allocation, risk management, and overall project oversight. When these governance and management structures are in place, stakeholders are more likely to have confidence in the cost-effectiveness of IT initiatives.
Source: Adapted from community discussion — FAGFUR
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 1101. 1459 questions available.
Version 1.0.0. How we source questions