Isaca CISA Quiz 592 Topic 1 Questions 2956-2960

Question: 1

What is the BEST control to address SOL injection vulnerabilities?

AInput validation

BUnicode translation

CSecure Sockets Layer (SSL) encryption

DDigital signatures

Show Answer

Question: 2

Which of the following BEST demonstrates the degree of alignment between IT and business strategy?

ANumber of IT projects driven by business requirements

BPercentage of users aware of information security policies

CNumber of IT policies that refer directly to business goals

DPercentage of IT value drivers mapped to business value drivers

Show Answer

Question: 3

Which of the following practices BEST ensures that archived electronic information of permanent importance is accessible over time?

AAcquire applications that emulate old software.

BPeriodically test the integrity of the information.

CRegularly migrate data to current technology.

DPeriodically backup the archived data.

Show Answer

Question: 4

The BEST way to preserve data integrity through all phases of application containerization is to ensure which of the following?

ADevelopers are educated about how their roles relate to application security best practices.

BThe development team performs regular patching of application containers.

CSegregation of duties is developed and maintained in the application container environment.

DInformation security roles are defined and communicated in the information security policy.

Show Answer

Question: 5

An IS auditor attempts to sample for variables in a population of items with wide differences in values but

determines that an unreasonably large number of sample items must be selected to produce the desired

confidence level. In this situation, which of the following is the BEST audit decision?

AAllow more time and test the required sample

BSelect a judgmental sample

CSelect a stratified sample

DLower the desired confidence level

Show Answer

Isaca CISA Quiz:592 Topic:1 Questions:2956-2960