Isaca CISA Quiz 542 Topic 3 Questions 2706-2710

Question: 1

An organization is moving its on-site application servers to a service provider that operates a virtualized environment shared by multiple customers. Which of the following is the MOST significant risk to the organization?

AService provider access to organizational data

BCompeting workloads from other clients

CAccount hacking from other clients

DService provider limiting the right to audit

Show Answer

Question: 2

Which of the following controls is MOST effective in detecting spam?

ADenying transmission control protocol (TCP) connections in the mail server

BUsing heuristic filters based on the content of the message
C Refusing Internet protocol (IP) connections at the router

DRegistering the recipient with keepers of spam lists

Show Answer

Question: 3

During a post-implementation review, a step in determining whether a project met user requirements is to review the:

Acompleteness of user documentation.

Bintegrity of key calculations.

Ceffectiveness of user training.

Dchange requests initiated after go-live.

Show Answer

Question: 4

Which of the following is the MOST important control to help minimize the risk of data leakage from calls made to a business-to-business application programming interface (API)?

ADeploying content inspection at the API gateway

BImplementing API server clusters

CProviding API security awareness training to developers

DImplementing an API versioning system

Show Answer

Question: 5

An organization has suffered a number of incidents in which USB flash drives with sensitive data have been lost. Which of the following would be MOST effective in preventing loss of sensitive data?

AIssuing encrypted USB flash drives to staff

BImplementing a check-in/check-out process for USB flash drives

CIncreasing the frequency of security awareness training

DModifying the disciplinary policy to be more stringent

Show Answer

Isaca CISA Quiz:542 Topic:3 Questions:2706-2710