CISA practice questions 331–340

1. Question 331 · 1459 in bank

   Which of the following will invalidate the authenticity of digital evidence in a forensic investigation?

   • AThe investigator installed forensic software on the original drive that contained the evidence.
   • BThe evidence was collected from analysis of a copy of the disk data.
   • CA software write blocker was used in the collection of the evidence.
   • DThe investigator collected the evidence while the machine was still powered on.

   Show answer

   Answer: A

   Explanation

   Option A, where the investigator installed forensic software on the original drive that contained the evidence, could also impact the authenticity of the evidence. Installing software on the original drive might modify or alter the data, thus compromising its integrity. Forensic best practices recommend making a bit-for-bit copy of the drive and performing analysis on the copy to avoid altering the original evidence. In summary, both options A and D can affect the authenticity of digital evidence, but D is generally considered more critical because it directly involves potential changes to the original data while it is being collected.

   Source: Adapted from community discussion — 1e71ed5

   Next question

2. Question 332 · 1459 in bank

   An IS auditor is planning an audit of an organization's risk management practices. Which of the following would provide the MOST useful information about risk appetite?

   • APrior audit reports
   • BRisk policies
   • CManagement assertion
   • DRisk assessments

   Show answer

   Answer: B

   Next question

3. Question 333 · 1459 in bank

   Which of the following findings related to an organization's information security policy should be of GREATEST concern to an IS auditor?

   • AThe policy has not been communicated to all staff members and training has not been scheduled.
   • BThe policy has not addressed requirements for regular penetration testing.
   • CThe policy has not defined organizational roles and responsibilities for information security.
   • DThe policy is not developed in accordance with a globally accepted information security standard.

   Show answer

   Answer: C

   Explanation

   C is the right answer. If the information security policy has not defined roles and responsibilities, there is a significant risk that critical security tasks may not be performed or may be performed inadequately. This could lead to unclear accountability and a lack of ownership for essential security functions, making the organization vulnerable to security incidents.

   Source: Adapted from community discussion — thusharaj

   Next question

4. Question 334 · 1459 in bank

   An IS auditor should be MOST concerned with the placement of environmental detectors for heat, water, and smoke in which of the following locations?

   • AInside ventilation ducts
   • BAround cooling units
   • CAbove the ceiling
   • DUnder the floor

   Show answer

   Answer: A

   Explanation

   The way I understand the question is that where should the detectors not be placed. Usually they are not placed inside the ventilation system. All other options are fine.

   Source: Adapted from community discussion — PurpleParrot

   Next question

5. Question 335 · 1459 in bank

   An IS auditor finds a computer that is suspected to have been involved in a cyber crime. Which of the following activities is MOST critical to ensure data collected is admissible in a court of law?

   • ANotify law enforcement upon detection.
   • BTrack possession of the computer.
   • CCollect audit logs from the affected computer.
   • DPower off the computer to ensure data is not changed.

   Show answer

   Answer: B

   Explanation

   It may be D. Prioritizing the preservation of evidence by powering down the computer immediately ensures the data remains intact and maximizes its admissibility in court. It's important to emphasize the importance of following established forensic procedures and consulting with legal counsel to ensure proper handling and collection of digital evidence.

   Source: Adapted from community discussion — Sibsankar

   Next question

6. Question 336 · 1459 in bank

   When developing customer-facing IT applications, in which stage of the system development life cycle (SLC) MOST beneficial to consider data privacy principles?

   • AUser acceptance testing (UAT)
   • BSystems design and architecture
   • CRequirements definition
   • DSoftware selection and acquisition

   Show answer

   Answer: C

   Next question

7. Question 337 · 1459 in bank

   When planning a follow-up, the IS auditor is informed by operational management that recent organizational changes have addressed the previously identified risk and implementing the action plan is no longer necessary. What should the auditor do NEXT?

   • AReview the changes and determine whether the risks have been addressed.
   • BAccept management's assertion and report that the risks have been addressed.
   • CReport that the changes make it impractical to determine whether the risks have been addressed.
   • DDetermine whether the changes have introduced new risks that need to be addressed.

   Show answer

   Answer: A

   Next question

8. Question 338 · 1459 in bank

   Which of the following is the GREATEST concern when consolidating several applications from two outdated servers onto one new server?

   • ANetwork traffic may increase.
   • BPower usage will increase.
   • CThe new server will not be fully utilized after migration.
   • DSystem maintenance may require more coordination.

   Show answer

   Answer: D

   Explanation

   Answer D concerns such as increased coordination for system maintenance (option D) have a more immediate and direct impact on the organization's operations and ability to maintain service levels. Therefore, while underutilization of the new server is a valid concern, it may not be the greatest concern compared to other factors such as maintenance coordination in the context of consolidating applications onto a new server.

   Source: Adapted from community discussion — a84n

   Next question

9. Question 339 · 1459 in bank

   Which of the following BEST indicates that the effectiveness of an organization's security awareness program has improved?

   • AAn increase in the number of staff who complete awareness training
   • BA decrease in the number of malware outbreaks
   • CAn increase in the number of phishing emails reported by employees
   • DA decrease in the number of information security audit findings

   Show answer

   Answer: C

   Next question

10. Question 340 · 1459 in bank

    An IS auditor is conducting an IT governance audit and notices many initiatives are managed informally by isolated project managers. Which of the following recommendations would have the GREATEST impact on improving the maturity of the IT team?

    • ADocument and track all IT decisions in a project management tool.
    • BCreate an interdisciplinary IT steering committee to oversee IT prioritization and spending.
    • CSchedule a follow-up audit in the next year to confirm whether IT processes have matured.
    • DDiscontinue all current IT projects until formal approval is obtained and documented.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 331. 1459 questions available.