Question 601 · 1459 in bank
Which of the following is the MOST effective way to ensure adequate system resources are available for high-priority activities?
Show answer
Answer: B
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is the MOST effective way to ensure adequate system resources are available for high-priority activities?
Answer: B
During an IT governance audit, an IS auditor notes that IT policies and procedures are not regularly reviewed and updated. The GREATEST concern to the IS auditor is that policies and procedures might not:
Answer: A
Review is conducted to be sure it reflects current practices. Regulation change may change your way of doing your business but law/regulation change may happen in 10 years. I am asking "is it ok for a company not to review their policies and procedures for 10 years?". Answer is is clearly A. If regulation change you will change your way of doing your business, therefor its main purpose.
Source: Adapted from community discussion — frisbg
An organization is experiencing a large number of phishing attacks targeting employees and executives following a press release announcing an acquisition. Which of the following would provide the BEST defense against these attacks?
Answer: A
An IS auditor is reviewing an organization’s cloud access security broker (CASB) solution. Which of the following is MOST important for the auditor to verify?
Answer: A
Which of the following is the GREATEST risk of project dashboards being set without sufficiently defined criteria?
Answer: B
A health care organization utilizes Internet of Things (IoT) devices to improve patient outcomes through real-time patient monitoring and advanced diagnostics. Which of the following would BEST assist in isolating these devices from corporate network traffic?
Answer: D
I am going with D. Internal firewalls is under the umbrella of zero trust arch. I choose zero trust arch because of the broader security it supplies for security and not trusting devices external or internal. Internal firewalls would be apart of the zero trust arch.
Source: Adapted from community discussion — blehbleh
In a public key cryptographic system, which of the following is the PRIMARY requirement to address the risk of man-in-the-middle attacks through spoofing?
Answer: D
Which of the following is the PRIMARY benefit of operational log management?
Answer: C
C. It organizes data to identify performance issues. Operational log management helps collect, organize, and analyze logs to monitor the health and performance of systems and applications. By organizing log data, it becomes easier to identify performance issues, troubleshoot problems, and ensure system stability. While real-time monitoring and other benefits are valuable, the main focus of log management is often on understanding and improving operational performance.
Source: Adapted from community discussion — thusharaj
Which of the following system attack methods is executed by entering malicious code into the search box of a vulnerable website, causing the server to reveal restricted information?
Answer: C
Which of the following is MOST important for an IS auditor to verify when reviewing the planned use of Benford’s law as a data analytics technique to detect fraud in a set of credit card transactions?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 601. 1459 questions available.
Version 1.0.0. How we source questions