CISA practice questions 861–870

1. Question 861 · 1459 in bank

   An IS auditor notes that the previous year's disaster recovery test was not completed within the scheduled time frame due to insufficient hardware allocated by a third-party vendor. Which of the following provides the BEST evidence that adequate resources are now allocated to successfully recover the systems?

   • AHardware change management policy
   • BAn up-to-date RACI chart
   • CVendor memo indicating problem correction
   • DService level agreement (SLA)

   Show answer

   Answer: D

   Explanation

   A service level agreement (SLA) is a contract between an organization and its vendor that outlines the vendor's responsibilities for providing specific services, such as disaster recovery. The SLA should include provisions for the availability of adequate hardware and other resources required to support the disaster recovery process. By reviewing the SLA, the IS auditor can determine whether the vendor has made any changes to their resources allocation or service offerings that would address the issue noted in the previous year's disaster recovery test.

   Source: Adapted from community discussion — survivalkit

   Next question

2. Question 862 · 1459 in bank

   Which of the following reports would provide the GREATEST assurance to an IS auditor about the controls of a third party that processes critical data for the organization?

   • AIndependent control assessment
   • BBlack box penetration test report
   • CThe third party's control self-assessment (CSA)
   • DVulnerability scan report

   Show answer

   Answer: A

   Next question

3. Question 863 · 1459 in bank

   Which of the following is the BEST indicator of the effectiveness of signature-based intrusion detection systems (IDSs)?

   • AAn increase in the number of internally reported critical incidents
   • BAn increase in the number of unfamiliar sources of intruders
   • CAn increase in the number of identified false positives
   • DAn increase in the number of detected incidents not previously identified

   Show answer

   Answer: D

   Explanation

   Signature-based intrusion detection systems work by comparing network traffic or system activity against a database of known attack signatures or patterns. The primary goal is to detect and alert on known threats based on predefined signatures.

   Source: Adapted from community discussion — Swallows

   Next question

4. Question 864 · 1459 in bank

   Which of the following should be done by an IS auditor during a post-implementation review of a critical application that has been operational for six months?

   • ATest program system interfaces.
   • BVerify the accuracy of data conversions.
   • CAssess project management risk reports.
   • DExamine project change request logs.

   Show answer

   Answer: D

   Explanation

   D. Examine project change request logs. During a post-implementation review of a critical application that has been operational for six months, the IS auditor should examine project change request logs. This is important because it allows the auditor to review any changes made to the application after it went live. Examining change request logs helps assess whether changes were properly authorized, documented, and tested, and whether they have had any unexpected impacts on the system's performance or security. It also provides insights into the change management process, which is a crucial aspect of maintaining the application's stability and integrity. While the other options mentioned (testing program system interfaces, verifying data conversions, and assessing project management risk reports) are important activities, examining change request logs specifically addresses post-implementation change management, which is a critical aspect of maintaining the application's reliability and security.

   Source: Adapted from community discussion — AB1237

   Next question

5. Question 865 · 1459 in bank

   Which of the following types of testing would BEST mitigate the risk of a newly implemented system adversely impacting existing systems?

   • AUser acceptance testing (UAT)
   • BFunctionality testing
   • CSociability testing
   • DUnit testing

   Show answer

   Answer: C

   Explanation

   The purpose of sociability testing is to confirm that a new or modified system can operate in its target environment without adversely impacting existing systems.This should cover the platform that will perform primary application processing and interfaces with other systems, as well as changes to the desktop in a client- server or web development. Parallel testing is the process of feeding data into two systems-the modified system and an alternate system- and comparing the results. In this approach, the old and new systems operate concurrently for a period of time and perform the same processing functions. Pilot testing takes place first at one location and is then extended to other locations.

   Source: Adapted from community discussion — 3008

   Next question

6. Question 866 · 1459 in bank

   Which of the following would be of GREATEST concern to an IS auditor reviewing an organization's security incident handling procedures?

   • AAnnual tabletop exercises are performed instead of functional incident response exercises.
   • BRoles for computer emergency response team (CERT) members have not been formally documented.
   • CGuidelines for prioritizing incidents have not been identified.
   • DWorkstation antivirus software alerts are not regularly reviewed.

   Show answer

   Answer: C

   Explanation

   Guidelines for prioritizing incidents are essential for ensuring that security incidents are appropriately triaged and responded to in a timely manner based on their severity and potential impact on the organization. Without clear guidelines for prioritization, there is a risk that incidents may not be addressed promptly, potentially leading to prolonged exposure to threats or increased damage from security breaches.

   Source: Adapted from community discussion — Swallows

   Next question

7. Question 867 · 1459 in bank

   Which of the following is the MOST important consideration for an organization when strategizing to comply with privacy regulations?

   • AEnsuring up-to-date knowledge of where customer personal data is saved.
   • BEnsuring there are staff members with in-depth knowledge of the regulations.
   • CEnsuring regular access recertification to information systems.
   • DEnsuring contracts with third parties that process customer data are regularly updated.

   Show answer

   Answer: C

   Next question

8. Question 868 · 1459 in bank

   Which of the following should an IS auditor review FIRST during the audit of an organization's business continuity plan (BCP)?

   • ASystem recovery time objectives (RTOs)
   • BList of critical business processes
   • CSystem recovery manuals and documentation
   • DFrequency of business database replication

   Show answer

   Answer: B

   Next question

9. Question 869 · 1459 in bank

   Which of the following BEST ensures the confidentiality of sensitive data during transmission?

   • APassword protecting data over virtual local area networks (VLAN)
   • BSending data through proxy servers
   • CSending data over public networks using Transport Layer Security (TLS)
   • DRestricting the recipient through destination IP addresses

   Show answer

   Answer: C

   Next question

10. Question 870 · 1459 in bank

    Which of the following is the BEST detective control for a job scheduling process involving data transmission?

    • AMetrics denoting the volume of monthly job failures are reported and reviewed by senior management.
    • BJobs are scheduled to be completed daily and data is transmitted using a Secure File Transfer Protocol (SFTP).
    • CJob failure alerts are automatically generated and routed to support personnel.
    • DJobs are scheduled and a log of this activity is retained for subsequent review.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 861. 1459 questions available.