Isaca CISA Quiz 472 Topic 3 Questions 2356-2360

Question: 1

An IS auditor is reviewing IT policies and found that most policies have not been reviewed in over 3 years. The MOST significant risk is mat the policies do not reflect

Athe vision of the CEO

Bcurrent industry best practices

Cthe mission of the organization

Dcurrent legal requirements

Show Answer

Question: 2

Which of the following would be MOST useful to an IS auditor confirming that an IS department meets its service level agreements (SLAs)

ASystem utilization reports

BSystem downtime reports

CIS strategic plan

DCapacity planning tools

Show Answer

Question: 3

Which of the following is MOST critical to include when developing a data loss prevention (DIP) policy?

AIdentification of enforcement actions

BIdentification of the relevant network channels requiring protection

CIdentification of the users, groups, and roles to whom the policy will apply

DIdentification of the content to protect

Show Answer

Question: 4

Which of the following is the GREATEST security risk associated with data migration from a legacy human resources (HR) system to a cloud-based system''

AData from the source and target system may be intercepted

BRecords past their retention period may not be migrated to the new system

CSystem performance may be impacted by the migration

DData from the source and target system may have different data formats

Show Answer

Question: 5

As part of a follow-up of a previous year's audit, an IS auditor has increased the expected error rate for a sample. The impact will be:

Arequired sample size increases.

Bsampling risk decreases.

Cdegree of assurance increases.

Dstandard deviation decreases.

Show Answer

Isaca CISA Quiz:472 Topic:3 Questions:2356-2360