Question 261 · 1459 in bank
Which of the following is the MOST significant risk when an application uses individual end-user accounts to access the underlying database?
Show answer
Answer: B
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is the MOST significant risk when an application uses individual end-user accounts to access the underlying database?
Answer: B
An organization performs virtual machine (VM) replication instead of daily backups of its critical servers. Which of the following is MOST important to validate when evaluating the adequacy of recovery procedures?
Answer: A
An IS auditor is performing a project review and finds that scope reductions have been made without proper authorization. The IS auditor should be MOST concerned that:
Answer: D
Which of the following is MOST important to include in a contract with a software development service provider?
Answer: C
While a Service Level Agreement (SLA) (Option B) outlines the agreed-upon level of service, including performance metrics and support terms, ownership of intellectual property (Option C) is often considered more critical. Intellectual property rights define who owns the software code and related assets developed during the engagement. Clarity on ownership ensures that the organization retains control over its proprietary technology and can use, modify, and distribute the software as needed without restrictions or disputes.
Source: Adapted from community discussion — Swallows
How does a continuous integration/continuous development (CI/CD) process help to reduce software failure risk?
Answer: C
This is a fundamental aspect of CI/CD. Automated testing ensures that each code change or addition is thoroughly tested, including unit tests, integration tests, and regression tests. By automating these tests, developers can quickly identify bugs and errors, ensuring that issues are caught early in the development cycle before they can escalate into larger problems or cause software failures in production environments.
Source: Adapted from community discussion — Swallows
In reviewing the IT strategic plan, the IS auditor should consider whether it identifies the:
Answer: D
In reviewing the IT strategic plan, the IS auditor should consider whether it identifies the major IT initiatives. This is because major IT initiatives outline the key projects, objectives, and goals that the organization intends to pursue to align its IT activities with its overall business objectives. C is right answer
Source: Adapted from community discussion — Sibsankar
Which of the following would the IS auditor MOST likely review to determine whether modifications to the operating system parameters were authorized?
Answer: A
An organization is disposing of removable onsite media which contains sensitive information. Which of the following is the MOST effective method to prevent disclosure of sensitive data?
Answer: D
Which of the following is the MAIN responsibility of the IT steering committee?
Answer: D
Which of the following is MOST important for the effective implementation of an intrusion detection system (IDS)?
Answer: B
While providing logs for monitoring and reporting is important for retrospective analysis and incident response, without a robust security policy aligned with best practices, the IDS might not effectively identify and alert on suspicious activities in real-time. Therefore, configuring the security policy appropriately is considered the MOST important factor for the effective implementation of an IDS.
Source: Adapted from community discussion — KAP2HURUF
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 261. 1459 questions available.
Version 1.0.0. How we source questions