Isaca CISA Quiz 503 Topic 3 Questions 2511-2515

Question: 1

An IS auditor learns an organization does not perform full disaster recovery (DR) testing because past tests nave confirmed that all critical systems can individually be recovered within four hours, in line with business requirements. Which of the following should be the auditor's GREATEST concern''

AThe tests did not take into account the DR dependencies between different systems

BThe individual tests did not consider non-critical systems

CCritical systems should be recoverable in less than four hours

DPerforming many individual tests required more effort in total than a full DR test

Show Answer

Question: 2

For a company that outsources payroll processing, which of the following is the BEST way to ensure that only authorized employees are paid?

AOnly payroll employees should be given the password for data entry and report retrieval.

BEmployees should receive pay statements showing gross pay, net pay. and deductions.

CThe company's bank reconciliations should be independently prepared and checked.

DElectronic payroll reports should be independently reviewed.

Show Answer

Question: 3

When implementing a software product (middleware) to pass data between local area network (LAN) servers

and the mainframe, the MOST critical control consideration is:

Across-platform authentication.

Btime synchronization of databases.

Cnetwork traffic levels between platforms.

Dtime-stamping of transactions to facilitate recovery.

Show Answer

Question: 4

An IS auditor Is asked to review an organization's data backup and storage Infrastructure after a recent business outage Which of the following is the BEST "commendation to ensure data is continuously and instantly replicated?

ACloud-based disaster recovery solution

BA hoi site infrastructure setup

CRedundant array of inexpensive disks (RAID)

DVirtual load balancing

Show Answer

Question: 5

Many servers in a data center are not being utilized to their full capacity Which of the following is the MOST appropriate option for a feasibility study?

AStorage area networks (SAN)

BServer inventory review

CCloud computing

DServer consolidation

Show Answer

Isaca CISA Quiz:503 Topic:3 Questions:2511-2515