Isaca CISA Quiz 307 Topic 1 Questions 1531-1535

Question: 1

.Which of the following is a good control for protecting confidential data residing on a PC?

APersonal firewall

BFile encapsulation

CFile encryption

DHost-based intrusion detection

Show Answer

Question: 2

.Which of the following is a guiding best practice for implementing logical access controls?

AImplementing theBiba Integrity Model

BAccess is granted on a least-privilege basis, per the organization's data owners

CImplementing the Take-Grant access control model

DClassifying data according to the subject's requirements

Show Answer

Question: 3

.What does PKI use to provide some of the strongest overall control over data confidentiality, reliability, and integrity for Internet transactions?

AA combination of public-key cryptography and digital certificates and two-factor authentication

BA combination of public-key cryptography and two-factor authentication

CA combination of public-key cryptography and digital certificates

DA combination of digital certificates and two-factor authentication

Show Answer

Question: 4

.Which of the following do digital signatures provide?

AAuthentication and integrity of data

BAuthentication and confidentiality of data

CConfidentiality and integrity of data

DAuthentication and availability of data

Show Answer

Question: 5

.Regarding digital signature implementation, which of the following answers is correct?

AA digital signature is created by the sender to prove message integrity by encrypting the message with the sender's private key. Upon receiving the data, the recipient can decrypt the data using the sender's public key.

BA digital signature is created by the sender to prove message integrity by encrypting the message with the recipient's public key. Upon receiving the data, the recipient can decrypt the data using the recipient's public key.

CA digital signature is created by the sender to prove message integrity by initially using a hashing algorithm to produce a hash value or message digest from the entire message contents.
Upon receiving the data, the recipient can independently create it.

DA digital signature is created by the sender to prove message integrity by encrypting the message with the sender's public key. Upon receiving the data, the recipient can decrypt the data using the recipient's private key.

Show Answer

Isaca CISA Quiz:307 Topic:1 Questions:1531-1535