Isaca CISA Quiz 393 Topic 1 Questions 1961-1965

Question: 1

An organization is in the process of deciding whether to allow a bring your own device (BYOD) program. If approved, which of the following should be the FIRST control required before implementation?

AAn accept able use policy

BDevice registration

CDevice baseline configurations

DAn awareness program

Show Answer

Question: 2

Which of the following is MOST likely to be prevented by a firewall connected to the Internet?

ADisclosure of public key infrastructure (PKI) keys

BAlteration of email message content

CDial-m penetration attacks

DExternal spoofing of internal addresses

Show Answer

Question: 3

An IS auditor reviewing the acquisition of new equipment would consider which of the following to be a significant weakness?

AEvaluation criteria when finalized after the initial assessment of responses

BStaff involved in the evaluation were aware of the vendors being evaluated.

CIndependent consultants prepared the request for proposal (RFP) documents.

DThe closing date for responses was extended after a request from potential vendors.

Show Answer

Question: 4

A recent audit identified duplicate software licenses and technologies Which of the following would be MOST helpful to prevent this type of duplication in the future?

AConducting periodic inventory reviews

BUpdating IT procurement policies and procedures

CCentralizing IT procurement and approval practices

DEstablishing a project management office

Show Answer

Question: 5

Which of the following is the BEST approach to identify whether a vulnerability is actively being exploited?

AConduct a penetration test

BPerform log analysis.

CReview service desk reports.

DImplement key performance indicators (KPIs).

Show Answer

Isaca CISA Quiz:393 Topic:1 Questions:1961-1965