Isaca CISA Quiz 391 Topic 2 Questions 1951-1955

Question: 1

The operations team of an organization has reported an IS security attack. Which of the following should be the NEXT step for the security incident response team?

APerform a damage assessment

BReport results to management.

CDocument lessons learned

DPrioritize resources for corrective action

Show Answer

Question: 2

An IT governance framework provides an organization with:

Aassurance that there arc surplus IT investments

Bassurance that there will be IT cost reductions

Ca basis for directing and controlling IT.

Dorganizational structures to enlarge the market share through IT

Show Answer

Question: 3

The use of the Transport Layer Security (TLS) protocol enables the client in a network to be:

Aidentified by a password.

Bassured of the server s identity.

Cregistered by the server,

Dprovided with a digital certificate

Show Answer

Question: 4

A maturity model can be used to aid the implementation of IT governance by identifying:

Aimprovement opportunities.

Baccountabilities.

Cperformance drivers.

Dcritical success factors.

Show Answer

Question: 5

An IS auditor has assessed a payroll service provider's security policy and finds significant topics are missing. Which of the following is the auditor's BEST course of action?

ARecommend the service provider update their policy

BReport the risk to internal management

CNotify the service provider of the discrepancies.

DRecommend replacement of the service provider

Show Answer

Isaca CISA Quiz:391 Topic:2 Questions:1951-1955