Isaca CISA Quiz 10 Topic 3 Questions 46-50

Question: 1

Which of the following activities would allow an IS auditor to maintain independence while facilitating a control self-assessment (CSA)?

AImplementing the remediation plan

BDeveloping the CSA questionnaire

CPartially completing the CSA

DDeveloping the remediation plan

Show Answer

Question: 2

An IS auditor is reviewing an organization's primary router access control list. Which of the Mowing should result in a finding'

AThere is only one rule per group with access privileges.

BIndividual permissions are overriding group permissions.

CThere are conflicting permit and deny rules for the IT group

DThe network security group can change network address translation (NAT).

Show Answer

Question: 3

Which of the Mowing should be performed FIRST before key performance indicators (KPIs) can be implemented'

AAnalysis of industry benchmarks

BIdentification of organizational goals

CAnalysis of quantitative benefits

DImplementation of a balanced scorecard

Show Answer

Question: 4

Which of the following is the MOST important reason to classify a Jiiimr recovery plan (DRP) as confidential

AProtect the plan from unauthorized alteration.

BEnsure compliance with the data classification policy.

CReduce the risk of data leakage that could lead to an attack.

DComply with business continuity beet practice.

Show Answer

Question: 5

During an exit interview, senior management disagrees with some of the facts presented in the draft audit report and wants them removed from tie report. Which of the blowing would be the auditor's BEST course of action?

AGather evidence to analyze senior management's objections

BEscalate the issue to audit management

CRevise the assessment based on senior management's objections

DFinalize tie draft audit report without changes

Show Answer

Isaca CISA Quiz:10 Topic:3 Questions:46-50