Question 921 · 1459 in bank
Which of the following is the BEST indicator of the effectiveness of an organization's portfolio management program?
Show answer
Answer: A
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is the BEST indicator of the effectiveness of an organization's portfolio management program?
Answer: A
Which of the following would BEST prevent the potential leakage of sensitive corporate data from personal mobile devices accessing corporate applications?
Answer: D
It’s a personal device. The only preventive control for personal device similar in this is D. Signings of acceptable use policy
Source: Adapted from community discussion — Rachy
Which of the following would BEST determine whether a post-implementation review (PIR) performed by the project management office (PMO) was effective?
Answer: C
D is correct as per me .. bcos, the aim of PIR is to identify if the project objective has been achived or not. But here the question is about effctiveness of PIR. Effectivenss of PIR can be measured in terms of learnings implemented from PIR.
Source: Adapted from community discussion — Deeplaxmi
Which of the following applications has the MOST inherent risk and should be prioritized during audit planning?
Answer: A
yeah A. An internally developed application can be fall of flaws, but B. An onsite application that is unsupported, has "unsupported", so that one is for sure full of unpatched bugs.
Source: Adapted from community discussion — ChaBum
Which of the following BEST enables an organization to quantify acceptable data loss in the event of a disaster?
Answer: B
Which of the following is the BEST compensating control when segregation of duties is lacking in a small IS department?
Answer: A
https://info.knowledgeleader.com/segregation-of-duties-key-facts-you-need-to-know#:~:text=Compensating%2Fmitigating%20controls%20may%20exist,supervisory%20reviews%20and%20transaction%20logs . Compensating/mitigating controls may exist to mitigate the risks resulting from a lack of appropriate segregation of duties. These controls include audit trails, reconciliation, supervisory reviews and transaction logs.
Source: Adapted from community discussion — Mark_1
Which of the following would be the MOST useful metric for management to consider when reviewing a project portfolio?
Answer: B
On a public-key cryptosystem when there is no previous knowledge between parties, which of the following will BEST help to prevent one person from using a fictitious key to impersonate someone else?
Answer: A
A. Send a certificate that can be verified by a certification authority with the public key. Sending a certificate that can be verified by a certification authority with the public key would be the best approach to prevent one person from using a fictitious key to impersonate someone else in a public-key cryptosystem. Certificates are used to bind a public key to a specific entity, and a certification authority's verification helps ensure the authenticity of the key. This approach establishes trust and prevents unauthorized individuals from using fake keys to impersonate legitimate parties.
Source: Adapted from community discussion — lsiau76
Which of the following would BEST detect that a distributed denial of service (DDoS) attack is occurring?
Answer: D
"Automated monitoring of logs." Log monitoring can provide early warning signs of a DDoS attack, such as a sudden increase in traffic volume or an unusual pattern of network activity, that can be used to identify and respond to the attack in a timely manner.
Source: Adapted from community discussion — zebree
Which of the following is the BEST indicator for measuring performance of the IT help desk function?
Answer: B
https://www.klipfolio.com/metrics/support/ticket-reopen-rate/ Ticket Reopen Rate (RR) is the percentage of solved tickets that have been reopened by customers. It is important for a support team to track ticket reopen rate, as this can provide insight into how well their customer service is performing. Reopen rates provide a direct measure of customer satisfaction with the service they receive and can help determine where improvements need to be made. For example, if an unusually high number of tickets are being reopened after they have been marked as solved, it could be a sign that customers are not getting the answers they need or that agents are not providing satisfactory solutions.
Source: Adapted from community discussion — Mark_1
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 921. 1459 questions available.
Version 1.0.0. How we source questions