CISA practice questions 661–670

1. Question 661 · 1459 in bank

   When reviewing an organization's information security policies, an IS auditor should verify that the policies have been defined PRIMARILY on the basis of:

   • Aan information security framework.
   • Bpast information security incidents.
   • Ca risk management process.
   • Dindustry best practices.

   Show answer

   Answer: C

   Explanation

   A risk management process: A risk management process is the most appropriate basis for defining information security policies. Risk management involves identifying, analyzing, evaluating, and treating risks. Policies developed through a risk management process are tailored to the organization's specific risks and requirements, and they are designed to reduce the likelihood and impact of security incident

   Source: Adapted from community discussion — 3008

   Next question

2. Question 662 · 1459 in bank

   An organization that has suffered a cyberattack is performing a forensic analysis of the affected users' computers. Which of the following should be of GREATEST concern for the IS auditor reviewing this process?

   • AThe chain of custody has not been documented.
   • BAn imaging process was used to obtain a copy of the data from each computer.
   • CAudit was only involved during extraction of the information.
   • DThe legal department has not been engaged.

   Show answer

   Answer: A

   Next question

3. Question 663 · 1459 in bank

   The members of an emergency incident response team should be:

   • Aassigned at the time of each incident.
   • Bappointed by the CISO.
   • Crestricted to IT personnel.
   • Dselected from multiple departments.

   Show answer

   Answer: D

   Next question

4. Question 664 · 1459 in bank

   Which of the following is the BEST indicator that an application system's agreed-upon level of service has been met?

   • ATransaction response time
   • BBandwidth usage logs
   • CCPU utilization reports
   • DSecurity incident reports

   Show answer

   Answer: A

   Next question

5. Question 665 · 1459 in bank

   The PRIMARY benefit to using a dry-pipe fire-suppression system rather than a wet-pipe system is that a dry-pipe system:

   • Adisperses dry chemical suppressants exclusively.
   • Bhas a decreased risk of leakage.
   • Callows more time to abort release of the suppressant.
   • Dis more effective at suppressing flames.

   Show answer

   Answer: B

   Next question

6. Question 666 · 1459 in bank

   After the merger of two organizations, which of the following is the MOST important task for an IS auditor to perform?

   • AUpdating the continuity plan for critical resources
   • BUpdating the security policy
   • CVerifying that access privileges have been reviewed
   • DInvestigating access rights for expiration dates

   Show answer

   Answer: C

   Explanation

   yes the IS auditor cannot update BCP or security policy.. its the work of organisation. so a and B option are ruled out. Amongst c and D, c is better choice.

   Source: Adapted from community discussion — Deeplaxmi

   Next question

7. Question 667 · 1459 in bank

   An organization sends daily backup media by courier to an offsite location. Which of the following provides the BEST evidence that the media is transported reliably?

   • ADocumented backup media transport procedures
   • BSigned acknowledgments by offsite manager
   • CCertification of the courier company
   • DDelivery schedule of the backup media

   Show answer

   Answer: B

   Explanation

   The courier company may take it to the off-site center, but the responsible person may not necessarily receive it, so the control strength is higher with the responsible person's receipt by the off-site manager.

   Source: Adapted from community discussion — Swallows

   Next question

8. Question 668 · 1459 in bank

   As part of a recent business-critical initiative, an organization is re-purposing its customer data. However, its customers are unaware that their data is being used for another purpose What is the BEST recommendation to address the associated data privacy risk to the organization?

   • AEnsure the data processing activity remains onshore.
   • BMaintain an audit trail of the data analysis activity.
   • CObtain customer consent for secondary use of the data.
   • DAdjust the existing data retention requirements.

   Show answer

   Answer: C

   Next question

9. Question 669 · 1459 in bank

   An organization has adopted a backup and recovery strategy that involves copying on-premise virtual machine (VM) images to a cloud service provider. Which of the following provides the BEST assurance that VMs can be recovered in the event of a disaster?

   • AExistence of a disaster recovery plan (DRP) with specified roles for emergencies
   • BPeriodic on-site restoration of VM images obtained from the cloud provider
   • CProcurement of adequate storage for the VM images form the cloud service provider
   • DInclusion of the right to audit in the cloud service provider contract

   Show answer

   Answer: B

   Explanation

   Periodically restoring VM images obtained from the cloud provider on-site allows the organization to validate the integrity of the backup copies and ensure that they can be successfully restored in case of a disaster. This process helps verify that the backup and recovery strategy is effective and that the organization can rely on the cloud provider's services for disaster recovery purposes. While regular backups to a cloud service provider offer an essential component of a disaster recovery strategy, periodic on-site restoration provides a critical validation step to confirm that the backup copies are usable and that the organization can recover its VMs as needed. This practice ensures readiness for disaster scenarios and helps mitigate the risk of data loss or downtime.

   Source: Adapted from community discussion — Swallows

   Next question

10. Question 670 · 1459 in bank

    During the implementation of an enterprise resource planning (ERP) system, an IS auditor is reviewing the results of user acceptance testing (UAT). The auditor's PRIMARY focus should be to determine if:

    • Aapplication interfaces have been satisfactorily tested.
    • Ball errors found in the testing process have been corrected.
    • Cthe business process owner has signed off on the results.
    • Dsystem integration testing was performed.

    Show answer

    Answer: C

    Explanation

    During the review of user acceptance testing (UAT) results, the IS auditor's primary focus should be to determine if the business process owner has signed off on the results. This ensures that the ERP system meets the business requirements and that the business process owner is satisfied with the performance of the system.

    Source: Adapted from community discussion — SBD600

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 661. 1459 questions available.