Isaca CISA Quiz 572 Topic 3 Questions 2856-2860

Question: 1

To address issues related to privileged users identified in an IS audit, management implemented a security information and event management (SIEM) system. Which type of control .........

ADirective

BCorrective

CPreventive

DDetective

Show Answer

Question: 2

Tunneling provides additional security for connecting one host to another through the Internet by:

Aproviding end-to-end encryption.

Bfacilitating the exchange of public key infrastructure (PKI) certificates

Cpreventing password cracking and replay attacks

Denabling the use of stronger encryption keys

Show Answer

Question: 3

An IS auditor finds a number of system accounts that do not have documented approvals Which of the following should be performed FIRST by the auditor?

AHave the accounts removed immediately

BObtain sign-off on the accounts from the application owner

CDocument a finding and report an ineffective account provisioning control

DDetermine the purpose and risk of the accounts

Show Answer

Question: 4

An IS auditor finds that a document related to a client has been leaked. Which of the following should be the auditor's NEXT step?

AReport data leakage finding to regulatory authorities

BDetermine the classification of data leaked

CReport data leakage finding to senior management

DNotify appropriate law enforcement.

Show Answer

Question: 5

Following the discovery of inaccuracies in a data warehouse, an organization has implemented data profiling, cleansing, and handling filters to enhance the quality of data obtained from c

ADetective control

BCompensating control

CDirective control

DCorrective control

Show Answer

Isaca CISA Quiz:572 Topic:3 Questions:2856-2860