Isaca CISA Quiz 429 Topic 2 Questions 2141-2145

Question: 1

Which of the following is the MOST effective control to minimize the risk of cross-site scripting (XSS)?

APeriodic vulnerability assessments

BWeb firewall policy

CSecure coding practices

DNetwork intrusion prevention system

Show Answer

Question: 2

An organization is replacing its financial processing system. To help ensure that transactions in the new system are processed accurately, which of the following is MOST appropriate?

ADocument and test internal controls over the conversion.

BCompare year-to-date balances between the systems.

CReview data file conversion procedures.

DReconcile results of parallel processing.

Show Answer

Question: 3

At what point in software development should the user acceptance test plan be prepared?

AFeasibility study

BTransfer into production

CRequirements definition

DImplementation planning

Show Answer

Question: 4

Which of the following would BEST detect that a distributed-denial-of-service attack (DDoS) is occurring?

AServer crashes

BPenetration testing

CAutomated monitoring of logs

DCustomer service complaints

Show Answer

Question: 5

During an audit of a data center, an IS auditor's BEST way to gain an understanding of physical security controls is to:

Acontact the alarm vendor and identify where alarms are installed in the data center

Breview the data center's physical security procedures.

Ctake a tour of the facility and identify physical security controls.

Dobtain the engineering plans for the building and identify points of entry.

Show Answer

Isaca CISA Quiz:429 Topic:2 Questions:2141-2145