Isaca CISA Quiz 183 Topic 2 Questions 911-915

Question: 1

Which of the following would be the BEST access control procedure?

AThe data owner formally authorizes access and an administrator implements the user authorization tables.

BAuthorized staff implements the user authorization tables and the data owner sanctions them.

CThe data owner and an IS manager jointly create and update the user authorization tables.

DThe data owner creates and updates the user authorization tables.

Show Answer

Question: 2

Which of the following would MOST effectively reduce social engineering incidents?

ASecurity awareness training

Bincreased physical security measures

CE-mail monitoring policy

Dintrusion detection systems

Show Answer

Question: 3

An information security policy stating that 'the display of passwords must be masked or suppressed' addresses which of the following attack methods?

APiggybacking

BDumpster diving

CShoulder surfing

DImpersonation

Show Answer

Question: 4

To ensure compliance with a security policy requiring that passwords be a combination of letters

and numbers, an IS auditor should recommend that:

Athe company policy be changed.

Bpasswords are periodically changed.

Can automated password management tool be used.

Dsecurity awareness training is delivered.

Show Answer

Question: 5

An IS auditor has identified the lack of an authorization process for users of an application. The IS auditor's main concern should be that:

Amore than one individual can claim to be a specific user.

Bthere is no way to limit the functions assigned to users.

Cuser accounts can be shared.

Dusers have a need-to-know privilege.

Show Answer

Isaca CISA Quiz:183 Topic:2 Questions:911-915