Isaca CISA Quiz 248 Topic 1 Questions 1236-1240

Question: 1

In an organization where an IT security baseline has been defined, an IS auditor should FIRST ensure:

Aimplementation.

Bcompliance.

Cdocumentation.

Dsufficiency.

Show Answer

Question: 2

To ensure an organization is complying with privacy requirements, an IS auditor should FIRST review:

Athe IT infrastructure.

Borganizational policies, standards and procedures.

Clegal and regulatory requirements.

Dthe adherence to organizational policies, standards and procedures.

Show Answer

Question: 3

A top-down approach to the development of operational policies will help ensure:

Athat they are consistent across the organization.

Bthat they are implemented as a part of risk assessment.

Ccompliance with all policies.

Dthat they are reviewed periodically.

Show Answer

Question: 4

Which of the following would MOST likely indicate that a customer data warehouse should remain in-house rather than be outsourced to an offshore operation?

ATime zone differences could impede communications between IT teams.

BTelecommunications cost could be much higher in the first year.

CPrivacy laws could prevent cross-border flow of information.

DSoftware development may require more detailed specifications.

Show Answer

Question: 5

A retail outlet has introduced radio frequency identification (RFID) tags to create unique serial numbers for all products. Which of the following is the PRIMARY concern associated with this initiative?

AIssues of privacy

BWavelength can be absorbed by the human body

CRFID tags may not be removable

DRFID eliminates line-of-sight reading

Show Answer

Isaca CISA Quiz:248 Topic:1 Questions:1236-1240