Question 951 · 1459 in bank
Which of the following is the GREATEST risk associated with conducting penetration testing on a business-critical application production environment?
Show answer
Answer: B
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is the GREATEST risk associated with conducting penetration testing on a business-critical application production environment?
Answer: B
Which of the following documents would be MOST useful in detecting a weakness in segregation of duties?
Answer: D
Which of the following should be of GREATEST concern to an IS auditor reviewing a system software development project based on agile practices?
Answer: A
A: Agile means "the ability to move quickly and easily". In the Agile method, programmers do not spend much time on documentation.
Source: Adapted from community discussion — Aly
Which of the following is the PRIMARY advantage of using virtualization technology for corporate applications?
Answer: C
Which of the following IT service management activities is MOST likely to help with identifying the root cause of repeated instances of network latency?
Answer: C
Which of the following is the BEST indication that an information security program is aligned with organizational objectives?
Answer: C
While having information security processes in place throughout the system development life cycle (SDLC) (option D) is important for building security into the organization's systems and applications, it may not necessarily guarantee alignment with organizational objectives. However, managing risk to within organizational tolerances directly reflects the organization's strategic priorities and ensures that the information security program is contributing to the achievement of those objectives. Therefore, option C is the BEST indication of alignment with organizational objectives.
Source: Adapted from community discussion — Swallows
Which of the following is the MOST effective way to maintain network integrity when using mobile devices?
Answer: B
Which of the following is a challenge in developing a service level agreement (SLA) for network services?
Answer: A
Which of the following is MOST important to ensure when planning a black box penetration test?
Answer: D
The scope is more important. Oops you brought down our production servers because they werent in scope is more serious than management not being aware of pentesters doing their planned work on the appropriate systems. Even if it's black box, you can still define a scope.
Source: Adapted from community discussion — choboanon
Which of the following BEST determines if a batch update job was successfully executed?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 951. 1459 questions available.
Version 1.0.0. How we source questions