Isaca CISA Quiz 399 Topic 1 Questions 1991-1995

Question: 1

Which of the following is the MOST effective way for an IS auditor to identify unauthorized changes to the production state of a critical business application?

AReview recent updates in the configuration management database (CMDB) for compliance with IT patches.

BRun an automated scan of the production environment to detect missing software patches.

CCompare a list of production system changes with the configuration management database

DReview recently approved changes to application programming interfaces (API) in the production environment.

Show Answer

Question: 2

Which of the following should be an IS auditor's PRIMARY consideration when reviewing a project to outsource data center hosting services?

ARegulatory requirements regarding the location of data

BAdherence to industry standards for ensuring integrity of data

CThe vendor's ability to meet established service level agreements (SLAs)

DExistence of a right-to-audit clause in the vendor agreement

Show Answer

Question: 3

Which of the following presents the GREATEST security risk in a virtualized computing environment?

ASome business users have not received appropriate training on the virtual desktop environment.

BPhysical access to the data center that hosts hardware for virtual machines is not logged.

CBackups for sensitive data formats are not stored at an offsite location.

DPasswords for the software that controls the operations of virtual machines are set to default.

Show Answer

Question: 4

An IT department installed critical patches provided by the vendor to HR production servers. Immediately after the installation was completed, the HR department called to report that none of its users could access the system, what should be the IT department's FIRST step in addressing this issue?

AFollow back-out procedures

BTroubleshoot the system and fix the issue.

CRun system diagnostics on the staging servers.

DDocument the calls and user issues.

Show Answer

Question: 5

Missing text

ARestricting administrative rights on employee workstations

BRequiring automated installation of software

CScanning of workstations daily for unauthorized software use

DImplementing real-time monitoring software on employee workstations

Show Answer

Isaca CISA Quiz:399 Topic:1 Questions:1991-1995