Question 821 · 1459 in bank
Which of the following is the MOST effective control to mitigate against the risk of inappropriate activity by employees?
Show answer
Answer: C
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is the MOST effective control to mitigate against the risk of inappropriate activity by employees?
Answer: C
Which of the following would an IS auditor consider the GREATEST risk associated with a mobile workforce environment?
Answer: A
An Information Systems (IS) auditor would consider the greatest risk associated with a mobile workforce environment to be security. A mobile workforce environment increases the risk of unauthorized access to sensitive information, loss of data due to device theft or loss, and exposure to malware and other cyber threats. To address these risks, an IS auditor would recommend implementing strong security controls such as encryption, remote wipe, and two-factor authentication to ensure the protection of sensitive information. They may also suggest conducting regular security audits and training employees on best practices for mobile device security.
Source: Adapted from community discussion — zebree
Which of the following key performance indicators (KPIs) provides stakeholders with the MOST useful information about whether information security risk is being managed?
Answer: B
Which of the following is MOST important when implementing a data classification program?
Answer: B
understand the data classification levels. This involves categorizing data based on its sensitivity, importance, and potential impact if compromised. Data classification levels help define how data should be handled, stored, and protected. Once you have a clear understanding of these levels, you can develop appropriate policies, procedures, and security measures to safeguard the data effectively.
Source: Adapted from community discussion — AB1237
Which of the following is an IS auditor's BEST recommendation to help an organization increase the efficiency of computing resources?
Answer: C
Virtualization allows for the creation of a virtual version of a device or resource, such as a server, storage device, network, or even an operating system. This can lead to more efficient utilization of physical computer hardware and can reduce IT expenses by reducing the need for physical hardware systems. Virtual machines can also be more easily managed, configured, and maintained than physical hardware.
Source: Adapted from community discussion — dan08
Which of the following would BEST manage the risk of changes in requirements after the analysis phase of a business application development project?
Answer: C
While a Quality Assurance (QA) review (Option B) is important for ensuring that the developed application meets quality standards and requirements, it typically occurs after the development phase. Ongoing participation by relevant stakeholders, on the other hand, helps proactively manage changes in requirements before they impact the project timeline, budget, and scope. Therefore, it is the best approach for managing the risk of changes in requirements during business application development projects.
Source: Adapted from community discussion — Swallows
Which of the following is the BEST data integrity check?
Answer: B
Tracing data back to the point of origin involves validating the source and ensuring that data has been accurately captured and entered into the system. This check helps identify any discrepancies or errors that may have occurred during data input or transfer processes. can verify its accuracy, completeness, and consistency throughout its journey within the system. It involves verifying whether the data matches the original source, such as documents, forms, or electronic data feeds.
Source: Adapted from community discussion — Idkanything
Which of the following is the BEST indicator of the effectiveness of an organization's incident response program?
Answer: D
How to ensure the effectiveness of incident response? Incident response is on the one hand whether you are aware of the occurrence of an incident, and on the other hand, how quickly you can react after the incident is discovered to reduce the impact. B is more reasonable than D, because in principle most applications will be included in the protection, but there are always a few applications in the organization that have not been included in the protection scope, but the percentage of protection is increased through incident response. The financial impact of each security incident is not necessarily the same, nor necessarily proportional to the length of the incident response time, so I think B would be the more appropriate answer.
Source: Adapted from community discussion — Victor83516
Which of the following BEST ensures the quality and integrity of test procedures used in audit analytics?
Answer: A
The correct answer is A. Developing and communicating test procedure best practices to audit teams. the best approach to ensure the quality and integrity of test procedures used in audit analytics is to develop and communicate best practices to audit teams. This approach helps to standardize procedures, improve consistency, and reduce the risk of errors or omissions
Source: Adapted from community discussion — 3008
Which of the following features of a library control software package would protect against unauthorized updating of source code?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 821. 1459 questions available.
Version 1.0.0. How we source questions