Isaca CISA Quiz 164 Topic 1 Questions 816-820

Question: 1

The difference between a vulnerability assessment and a penetration test is that a vulnerability

assessment:

Asearches and checks the infrastructure to detect vulnerabilities, whereas penetration testing intends to exploit the vulnerabilities to probe the damage that could result from the vulnerabilities.

Band penetration tests are different names for the same activity.

Cis executed by automated tools, whereas penetration testing is a totally manual process.

Dis executed by commercial tools, whereas penetration testing is executed by public processes.

Show Answer

Question: 2

The most common problem in the operation of an intrusion detection system (IDS) is:

Athe detection of false positives.

Breceiving trap messages.

Creject-error rates.

Ddenial-of-service attacks.

Show Answer

Question: 3

Which of the following provides nonrepudiation services for e-commerce transactions?

APublic key infrastructure (PKI)

BData Encryption Standard (DES)

CMessage authentication code (MAC)

DPersonal identification number (PIN)

Show Answer

Question: 4

While copying files from a floppy disk, a user introduced a virus into the network. Which of the following would MOST effectively detect the existence of the virus?

AA scan of all floppy disks before use

BA virus monitor on the network file server

CScheduled daily scans of all network drives

DA virus monitor on the user's personal computer

Show Answer

Question: 5

Which of the following message services provides the strongest evidence that a specific action has occurred?

AProof of delivery

BNonrepudiation

CProof of submission

DMessage origin authentication

Show Answer

Isaca CISA Quiz:164 Topic:1 Questions:816-820