CISA practice questions 501–510

1. Question 501 · 1459 in bank

   An IS auditor is reviewing documentation from a change that was applied to an application. Which of the following findings would be the GREATEST concern?

   • ATesting documentation is approved prior to completion of user acceptance testing (UAT).
   • BTesting documentation does not show manager approval.
   • CTesting documentation is kept in hard copy format.
   • DTesting documentation is dated three weeks before the system implementation date.

   Show answer

   Answer: A

   Next question

2. Question 502 · 1459 in bank

   Which of the following is the PRIMARY advantage of using an automated security log monitoring tool instead of conducting a manual review to monitor the use of privileged access?

   • AEase of log retrieval for audit purposes
   • BEase of storing and maintaining log file
   • CReduced costs associated with automating the review
   • DIncreased likelihood of detecting suspicious activity

   Show answer

   Answer: D

   Next question

3. Question 503 · 1459 in bank

   When verifying the effectiveness of an organization’s provisioning process, which sampling technique is MOST appropriate to use?

   • ARandom sampling
   • BJudgmental sampling
   • CStop-or-go sampling
   • DHaphazard sampling

   Show answer

   Answer: B

   Next question

4. Question 504 · 1459 in bank

   Which of the following should be of GREATEST concern to an IS auditor assessing an organization's patch management program?

   • APatches for medium- and low-risk vulnerabilities are omitted.
   • BPatches are deployed from multiple deployment servers.
   • CThere is no process in place to quarantine servers that have not been patched.
   • DThere is no process in place to scan the network to identify missing patches.

   Show answer

   Answer: D

   Explanation

   I have to go with D. If you aren't even scanning your network to find vulnerabilities how would you know what to quarantine or what patches to release on which systems or servers. D makes the most sense as it is the starting point to patch management.

   Source: Adapted from community discussion — blehbleh

   Next question

5. Question 505 · 1459 in bank

   An audit identified weak password controls in a database system. Which of the following provides the BEST evidence that the audit finding has been remediated?

   • AObservation of updated password settings with database administrators (DBAs)
   • BReview of database administrator (DBA) procedures
   • CAttestation from database administrators (DBAs) that password settings have been updated
   • DInterviews with management about remediation completion

   Show answer

   Answer: A

   Next question

6. Question 506 · 1459 in bank

   Which of the following is the BEST indicator that a third-party vendor adheres to the controls required by the organization?

   • ACertifications maintained by the vendor
   • BRegular independent assessment of the vendor
   • CReview of monthly performance reports submitted by the vendor
   • DSubstantive log file review of the vendor's system

   Show answer

   Answer: B

   Next question

7. Question 507 · 1459 in bank

   Which of the following BEST facilitates detection of zero-day exploits?

   • AAnti-malware software
   • BUser behavior analytics
   • CIntrusion detection systems (IDS)
   • DIntrusion prevention systems (IPS)

   Show answer

   Answer: B

   Explanation

   Answer looks like D based on manual : In contrast to IDSs, which rely on signature files to identify an attack as it happens (or after), an intrusion prevention system (IPS) predicts an attack before it can take effect. It does this by monitoring key areas of a computer system and looking for bad behavior, such as worms, Trojans, spyware, malware and hackers. It complements firewall, antivirus and antispyware tools to provide complete protection from emerging threats. It is able to block new (zero-day) threats that bypass traditional security measures, because it is not reliant on identifying and distributing threat signatures or patches.

   Source: Adapted from community discussion — user173681972

   Next question

8. Question 508 · 1459 in bank

   An IS auditor is evaluating the IT business planning process. Which of the following should be of GREATEST concern to the auditor?

   • ASeveral business cases are found to be based on a misdiagnosed problem.
   • BEnd users are not involved in business case development.
   • CBusiness case development is completed before strategic initiatives are finalized.
   • DBusiness impact analysis (BIA) results are not included in the business case.

   Show answer

   Answer: A

   Next question

9. Question 509 · 1459 in bank

   Which of the following is the BEST control to ensure data entered into a calculation program is accurate?

   • AProgrammed edit checks to prevent entry of invalid data
   • BReasonableness checks with a data entry range
   • CManual recalculation of data
   • DVisual verification of data entered

   Show answer

   Answer: A

   Next question

10. Question 510 · 1459 in bank

    Which of the following user actions poses the GREATEST risk for inadvertently introducing malware into a local network?

    • ADownloading a file from an enterprise file share
    • BViewing a hypertext markup language (HTML) document
    • CUploading a file onto an internal server
    • DOpening an email attachment from an external account

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 501. 1459 questions available.