Question 871 · 1459 in bank
Which of the following is MOST important when creating a forensic image of a hard drive?
Show answer
Answer: A
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is MOST important when creating a forensic image of a hard drive?
Answer: A
Which of the following is the MOST effective way for an organization to help ensure agreed-upon action plans from an IS audit will be implemented?
Answer: A
B Wants to test the corrective action that has been applied whereas A wants to ensure that corrective action will be done. So, B can only happen if corrective action has been taken.
Source: Adapted from community discussion — Wakazdave
When implementing Internet Protocol security (IPsec) architecture, the servers involved in application delivery:
Answer: B
When implementing Internet Protocol security (IPsec) architecture, the servers involved in application delivery would typically have their communication secured through option B: channel access through authentication. IPsec is a protocol suite used to secure IP communications by authenticating and encrypting each IP packet of a communication session. It provides data integrity, confidentiality, and authentication at the network layer.
Source: Adapted from community discussion — ObaidMan
Which of the following is the GREATEST concern associated with a high number of IT policy exceptions approved by management?
Answer: D
Which of the following is MOST important for an IS auditor to consider when planning an assessment of the organization's end -user computing (EUC) program?
Answer: A
Which of the following access rights presents the GREATEST risk when granted to a new member of the system development staff?
Answer: A
Which of the following is the FIRST step in initiating a data classification program?
Answer: A
Which of the following should be the FIRST step when planning an IS audit of a third-party service provider that monitors network activities?
Answer: B
Once the roles and responsibilities of the third-party provider are understood, the IS auditor can proceed to evaluate the organization's third-party monitoring process (Option C) to assess how effectively the organization manages and oversees the activities of the third-party service provider. However, reviewing the roles and responsibilities of the third-party provider comes first as it establishes the foundation for understanding the context and scope of the audit.
Source: Adapted from community discussion — Swallows
Which of the following is the BEST use of a maturity model in a small organization?
Answer: B
To identify required actions to close the gap between current and desired maturity levels: This option involves using the maturity model to assess the organization's current level of maturity and then identifying the actions required to move towards the desired maturity level. This approach can be useful if the organization has a specific goal or objective in mind and wants to focus its efforts on the areas that need the most improvement. This approach can also be more feasible for small organizations, as it does not necessarily require a significant investment of time or resources.
Source: Adapted from community discussion — 3008
Which of the following should be defined in an audit charter?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 871. 1459 questions available.
Version 1.0.0. How we source questions