Isaca CISA Quiz 586 Topic 1 Questions 2926-2930

Question: 1

When evaluating an IT organizational structure, which of the following is MOST important to ensure has been documented?

AHuman resources (HR) policy on organizational changes

BProvisions for cross-training

CSuccession and promotion plans

DJob functions and duties

Show Answer

Question: 2

To protect information assets, which of the following should be done FIRST?

AEncrypt data.

BRestrict access to data.

CBack up data.

DClassify data.

Show Answer

Question: 3

Which of the following is the PRIMARY objective of implementing privacy-related controls within an organization"?

ATo comply with legal and regulatory requirements

BTo provide options to individuals regarding use of their data

CTo prevent confidential data loss

DTo identify data at rest and data in transit for encryption

Show Answer

Question: 4

When reviewing an organization's information security policies, an IS auditor should venfy that the policies have been defined PRIMARILY on the basis of

Aan information security framework

Bindustry best practices

Cpast information security incidents

Da risk management process

Show Answer

Question: 5

An IS auditor is reviewing a network diagram. Which of the following would be the BEST location for placement of a firewall?

ABetween virtual local area networks (VLANs)

BAt borders of network segments with different security levels

CBetween each host and the local network switch/hub

DInside the demilitarized zone (DMZ)

Show Answer

Isaca CISA Quiz:586 Topic:1 Questions:2926-2930