Question 931 · 1459 in bank
Which of the following types of firewalls provide the GREATEST degree of control against hacker intrusion?
Show answer
Answer: C
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following types of firewalls provide the GREATEST degree of control against hacker intrusion?
Answer: C
Which of the following responsibilities of an organization's quality assurance (QA) function should raise concern for an IS auditor?
Answer: B
This responsibility may raise concerns because it overlaps with the responsibilities typically assigned to the development or maintenance teams rather than the QA function. If the QA team is responsible for both identifying defects and implementing solutions to correct them, it could compromise the independence and objectivity of the QA process. It may indicate a lack of segregation of duties, which is an important internal control principle to prevent errors or fraud.
Source: Adapted from community discussion — lingtianx1127
Which of the following is the GREATEST risk associated with data conversion and migration during implementation of a new application?
Answer: A
During the implementation of a new application, data from the old system will have to be converted and migrated to the new system. One of the greatest risks is the lack of data transformation rules. These rules are crucial for ensuring that the data from the old system can be accurately and effectively used in the new system. They define how data in the old system is mapped to the new system, how data quality issues are managed, how data types or formats are converted, and other similar aspects.
Source: Adapted from community discussion — KAP2HURUF
Which of the following is MOST important to include within a business continuity plan (BCP) so that backup and replication is configured in a way that ensures data availability?
Answer: D
Which of the following concerns is BEST addressed by securing production source libraries?
Answer: C
Securing production source libraries involves implementing controls to prevent unauthorized access, modification, or deletion of the code. This ensures that only authorized individuals can make changes, and that any changes are tracked and reviewed before being deployed to production. This significantly reduces the risk of unauthorized changes making their way into production, potentially causing security vulnerabilities, system instability, or unexpected behavior.
Source: Adapted from community discussion — KAP2HURUF
Which of the following is the BEST source of information for an IS auditor to use as a baseline to assess the adequacy of an organization's privacy policy?
Answer: D
Local privacy standards and regulations provide specific legal requirements and guidelines that organizations must adhere to regarding the handling, processing, and protection of personal data. These standards often outline the necessary elements and principles that a privacy policy should address, ensuring compliance with applicable laws and regulations. Therefore, they serve as a foundational reference point for evaluating the adequacy of an organization's privacy policy, as they provide the legal framework within which the organization operates regarding privacy matters. While globally accepted privacy best practices, historical breaches, and benchmark studies can offer valuable insights, local privacy standards and regulations are the most direct and authoritative source for assessing privacy policy adequacy in a particular jurisdiction.
Source: Adapted from community discussion — KAP2HURUF
Which of the following findings should be of MOST concern to an IS audit or reviewing an organization's business continuity plan (BCP)?
Answer: C
In this scenario there's an existing BCP. That rules out option B, as no such plan would existing without being approved in the first place Option A could be fixed by ensuting that the plan is updated each time a change to operations is implemented such as addressing any new risks or cyber threats etc. Option D can't be considered because only the members of the Business Continuity Management team are privy to the plan (including making sure that the BCP plans align with the company's objectives etc) The option that should be of most concern to the Auditor is Option C. An untested plan is just as bad as having no plan at all. Without testing, there's no guarantee that this approach would enable the company to recover from a disaster
Source: Adapted from community discussion — Mark_1
Which of the following conditions would be of MOST concern to an IS auditor assessing the risk of a successful brute force attack against encrypted data at rest?
Answer: A
A. With shorter key lengths, it becomes easier for attackers to guess the correct key through trial and error, especially with the computational power available today.
Source: Adapted from community discussion — shahji_900
The IS quality assurance (QA) group is responsible for:
Answer: C
The IS quality assurance (QA) group is responsible for evaluating the quality of the information systems and ensuring that they meet established standards. This includes reviewing and testing program changes to ensure that they adhere to established standards, policies, and procedures. The QA group is also responsible for identifying and reporting any deficiencies or weaknesses in the system.
Source: Adapted from community discussion — Broesweelies
Which of the following metrics would be MOST useful to an IS auditor when assessing the resilience of an application programming interface (API)?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 931. 1459 questions available.
Version 1.0.0. How we source questions