CISA practice questions 561–570

1. Question 561 · 1459 in bank

   Which of the following is the GREATEST concern when applying emergency patches?

   • ATemporary administrative permissions may be needed to apply patches.
   • BA change record may not be adequately assessed.
   • CPatch-related risk may not be adequately assessed.
   • DDocumented approvals may not be required before applying the emergency patch.

   Show answer

   Answer: C

   Next question

2. Question 562 · 1459 in bank

   During a follow-up audit, an IS auditor discovers that a recommendation has not been implemented. However, the auditee has implemented a manual workaround that addresses the identified risk less efficiently than the recommended action would. Which of the following is the auditor's BEST course of action?

   • ANotify management that the risk has been addressed and take no further action.
   • BNote that the risk has been addressed and notify management of the inefficiency.
   • CRequire management to implement the original recommendation.
   • DEscalate the remaining issue for further discussion and resolution.

   Show answer

   Answer: B

   Next question

3. Question 563 · 1459 in bank

   Which of the following poses the GREATEST risk to an organization related to system interfaces?

   • AThere is no process documentation for some system interfaces.
   • BNotifications of data transfers through the interfaces are not retained.
   • CParts of the data transfer process are performed manually.
   • DThere is no reliable inventory of system interfaces.

   Show answer

   Answer: D

   Next question

4. Question 564 · 1459 in bank

   Which of the following would be MOST helpful to an IS auditor performing a risk assessment of an application programming interface (API) that feeds credit scores from a well-known commercial credit agency into an organizational system?

   • AA data dictionary of the transferred data
   • BA technical design document for the interface configuration
   • CThe most recent audit report from the credit agency
   • DThe approved business case for the API

   Show answer

   Answer: B

   Next question

5. Question 565 · 1459 in bank

   IT management has accepted the risk associated with an IS auditor's finding due to the cost and complexity of the corrective actions. Which of the following should be the auditor's NEXT course of action?

   • APerform a cost-benefit analysis.
   • BDocument and inform the audit committee.
   • CReport the finding to external regulators.
   • DNotify senior management.

   Show answer

   Answer: B

   Next question

6. Question 566 · 1459 in bank

   Which of the following BEST reduces the risk of a network transmission failure?

   • ACompression software to minimize transmission duration
   • BServer load balancing
   • CA packet filtering firewall to reroute messages
   • DAlternative or diverse routing

   Show answer

   Answer: D

   Next question

7. Question 567 · 1459 in bank

   An organization has decided to build a data warehouse using source data from several disparate systems to support strategic decision-making. Which of the following is the BEST way to ensure the accuracy and completeness of the data used to support business decisions?

   • AThe source data is pre-selected so that it already supports senior management's desired business decision outcome.
   • BThe source data is from the current year of operations so that irrelevant data from prior years is not included.
   • CThe source data is modified in the data warehouse to remove confidential or sensitive information.
   • DThe source data is standardized and cleansed before loading into the data warehouse.

   Show answer

   Answer: D

   Next question

8. Question 568 · 1459 in bank

   Which of the following would an IS auditor find to be the GREATEST risk associated with the server room in a remote office location?

   • AThe server room does not have biometric controls.
   • BThe server room is secured by a key lock instead of an electronic lock.
   • CThe server room does not have temperature controls.
   • DThe server room's location is known by people who work in the area.

   Show answer

   Answer: C

   Next question

9. Question 569 · 1459 in bank

   An organization shares some of its customers' personally identifiable information (PII) with third-party suppliers for business purposes. What is MOST important for the IS auditor to evaluate to ensure that risk associated with leakage of privacy-related data during transmission is effectively managed?

   • AEncrypting and masking of customer data
   • BThe third party's privacy and data security policies
   • CNondisclosure and indemnity agreements
   • DService and operational level agreements

   Show answer

   Answer: A

   Explanation

   B. The third party's privacy and data security policies The most important factor for the IS auditor to evaluate to ensure that risk associated with leakage of privacy-related data during transmission is effectively managed is the third party's privacy and data security policies. It is important for the organization to ensure that the third parties it shares customer data with have adequate safeguards in place to protect the data from unauthorized access or disclosure. The IS auditor should review the third party's policies and procedures to ensure that they are sufficient to protect the privacy of the organization's customers. Options A, C, and D may also be important to consider, but they are not as significant as the third party's privacy and data security policies

   Source: Adapted from community discussion — nickchen

   Next question

10. Question 570 · 1459 in bank

    While performing a data center audit, an IS auditor observes rack-mounted, water-chilled cooling systems with no leak detection monitoring, in violation of policy. What is the MOST appropriate action for the auditor to take?

    • ADocument the observation as a finding.
    • BRecommend that the data center remove these water-chilled systems.
    • CRecommend a system with proper leak detection monitoring.
    • DNotify the data owner of potential risk.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 561. 1459 questions available.