Isaca CISA Quiz 402 Topic 2 Questions 2006-2010

Question: 1

Which of the following is MOST helpful when establishing the authenticity of digital evidence collected from a hard disk?

AMash of the files on the hard disk

BConfirmation by witnesses

CChain of custody documentation

DBit-by-bit image of the hard disk

Show Answer

Question: 2

Which of the following poses the GREATEST risk to the enforceability of networking policies in a virtualized environment?

AUse of 3 public key infrastructure

BLack of encryption for data at rest

CTransmission of data on public networks

DLack of visibility into the networks

Show Answer

Question: 3

An IS auditor finds ad hoc vulnerability scanning is in place with no clear alignment to the organization's wider security threat and vulnerability management program. Which of the following would BEST enable the organization to work toward improvement in this area?

AMaintaining a catalog of vulnerability that may impact mission-critical systems

BOutsourcing the threat and vulnerability management function to a third party

CUsing a capability maturity model to identify a path to an optimized program

DImplementing security logging to enhance threat and vulnerability management

Show Answer

Question: 4

An IS auditor discovers that management has created a system interface to receive financial data and store it in a data warehouse. Which of the following provides the BEST assurance that data in the data warehouse is accurate?

AEstablished risk management processes

BA documented change management process

CManagement, access reviews

DManagement reconciliations

Show Answer

Question: 5

Which of the following should an IS auditor use when verifying a three-way match has occurred in an enterprise resource planning (ERP) system?

APurchase requisition

BGoods delivery notification

CPurchase order

DBank confirmation

Show Answer

Isaca CISA Quiz:402 Topic:2 Questions:2006-2010