Isaca CISA Quiz 308 Topic 2 Questions 1536-1540

Question: 1

.What is an initial step in creating a proper firewall policy?

AAssigning access to users according to the principle of least privilege

BDetermining appropriate firewall hardware and software

CIdentifying network applications such as mail, web, or FTP servers

DConfiguring firewall access rules

Show Answer

Question: 2

.What type of cryptosystem is characterized by data being encrypted by the sender using the recipient's public key, and the data then being decrypted using the recipient's private key?

AWith public-key encryption, or symmetric encryption

BWith public-key encryption, or asymmetric encryption

CWith shared-key encryption, or symmetric encryption

DWith shared-key encryption, or asymmetric encryption

Show Answer

Question: 3

.How does the SSL network protocol provide confidentiality?

AThrough symmetric encryption such as RSA

BThrough asymmetric encryption such as Data Encryption Standard, or DES

CThrough asymmetric encryption such as Advanced Encryption Standard, or AES

DThrough symmetric encryption such as Data Encryption Standard, or DES

Show Answer

Question: 4

.What are used as the framework for developing logical access controls?

AInformation systems security policies

BOrganizational security policies

CAccess Control Lists (ACL)

DOrganizational charts for identifying roles and responsibilities

Show Answer

Question: 5

.Which of the following are effective controls for detecting duplicate transactions such as payments made or received?

AConcurrency controls

BReasonableness checks

CTime stamps

DReferential integrity controls

Show Answer

Isaca CISA Quiz:308 Topic:2 Questions:1536-1540