Isaca CISA Quiz 540 Topic 1 Questions 2696-2700

Question: 1

An IS audit had identified that default passwords for a newly implemented application were not changed. During the follow-up audit which of the

following would provide the BEST evidence that the finding was effectively addressed?

AWritten confirmation from management that the passwords were changed

BScreenshots of system parameters requiring password changes on next login

CSystem-generated emails requiring application users to change passwords

DApplication log files that record the password changes

Show Answer

Question: 2

Inherent risk ratings are determined by assessing the impact and likelihood of a threat or vulnerability occurring:

ABefore the risk appetite Is established

BAfter compensating have been applied

CAfter internal controls are taken into account.

DBefore internal controls are taken into account.

Show Answer

Question: 3

Which of the following areas are the MOST likely cause of an application producing several erroneous reports?

AA deficiency in user acceptance testing

BA deficiency in IT resource allocation

CA deficiency in patch management

DA deficiency in database administration

Show Answer

Question: 4

An organization is developing a web portal using some external components. Which of the following should be of MOST concern to an IS auditor?

ASome of the developers are located in another country.

BThe organization has not reviewed the components for known exploits.

COpen-source components were integrated during development.

DStaff require additional training in order to perform cede review.

Show Answer

Question: 5

The IS security group is planning to implement single sign-on. What is the IS auditor's PRIMARY concern?

AIntegrated access rules will increase users' access privileges.

BIntegrated access rules will restrict users' access privileges.

CManaging user IDs/passwords will require increased efforts.

DCompromise of a user ID/password will yield more privileges

Show Answer

Isaca CISA Quiz:540 Topic:1 Questions:2696-2700