Isaca CISA Quiz 168 Topic 2 Questions 836-840

Question: 1

During an audit of an enterprise that is dedicated to e-commerce, the IS manager states that digital signatures are used when receiving communications from customers. To substantiate this, an IS auditor must prove that which of the following is used?

AA biometric, digitalized and encrypted parameter with the customer's public key

BA hash of the data that is transmitted and encrypted with the customer's private key

CA hash of the data that is transmitted and encrypted with the customer's public key

DThe customer's scanned signature encrypted with the customer's public key

Show Answer

Question: 2

When planning an audit of a network setup, an IS auditor should give highest priority to obtaining which of the following network documentation?

AWiring and schematic diagram

BUsers' lists and responsibilities

CApplication lists and their details

DBackup and recovery procedures

Show Answer

Question: 3

Which of the following encrypt/decrypt steps provides the GREATEST assurance of achieving confidentiality, message integrity and nonrepudiation by either sender or recipient?

AThe recipient uses their private key to decrypt the secret key.

BThe encryptedprehash code and the message are encrypted using a secret key.

CThe encryptedprehash code is derived mathematically from the message to be sent.

DThe recipient uses the sender's public key, verified with a certificate authority, to decrypt theprehash code.

Show Answer

Question: 4

Use of asymmetric encryption in an internet e-commerce site, where there is one private key for the hosting server and the public key is widely distributed to the customers, is MOST likely to provide comfort to the:

Acustomer over the authenticity of the hosting organization.

Bhosting organization over the authenticity of the customer.

Ccustomer over the confidentiality of messages from the hosting organization.

Dhosting organization over the confidentiality of messages passed to the customer.

Show Answer

Question: 5

E-mail message authenticity and confidentiality is BEST achieved by signing the message using the:

( A) sender's private key and encrypting the message using the receiver's public key.

Asender's public key and encrypting the message using the receiver's private key.

Breceiver's private key and encrypting the message using the sender's public key.

Creceiver's public key and encrypting the message using the sender's private key.

Show Answer

Isaca CISA Quiz:168 Topic:2 Questions:836-840