Isaca CISA Quiz 564 Topic 3 Questions 2816-2820

Question: 1

An IS auditor's PRIMARY objective when examining problem reports should be to help ensure:

Aproblems are resolved in a cost-effective manner.

Bevery problem is classified appropriately.

Cproblems are only escalated to senior management when necessary.

Devery problem is assigned to an individual for resolving.

Show Answer

Question: 2

Which of the following is the GREATEST threat to Voice-over Internet Protocol (VoIP) related to privacy?

ACall recording

BIncorrect routing

CEavesdropping

DDenial of service (DoS)

Show Answer

Question: 3

The FIRST course of action an investigator should take when a computer is being attacked is to:

Acopy the contents of the hard drive.

Bdisconnect it from the network.

Cterminate all active processes

Ddisconnect the power source.

Show Answer

Question: 4

Which of the following is an example of a preventive control?

APurchase orders in the system being checked by a supervisor prior to execution to identify errors during entry

BAn online retailer's daily review of transactions processed to identify trends and changes in customer demand

CRegular assessments of the sales department to identify the most profitable sales strategies used by sales staff D. Continuous operation of a screening system to identify fraudulent patterns in recent transactions

Show Answer

Question: 5

Which of the following is the MOST reliable way for an IS auditor to evaluate the operational effectiveness of an organization's data loss prevention (DLP) controls?

AReview data classification levels based on industry best practice.

BVerify that confidential files cannot be transmitted to a personal USB device.

CConduct interviews to identify possible data protection vulnerabilities.

DVerify that current DLP software is installed on all computer systems.

Show Answer

Isaca CISA Quiz:564 Topic:3 Questions:2816-2820