Isaca CISA Quiz 170 Topic 3 Questions 846-850

Question: 1

Which of the following is a technique that could be used to capture network user passwords?

AEncryption

BSniffing

CSpoofing

DData destruction

Show Answer

Question: 2

Which of the following controls would BEST detect intrusion?

AUser IDs and user privileges are granted through authorized procedures.

BAutomatic logoff is used when a workstation is inactive for a particular period of time.

CAutomatic logoff of the system occurs after a specified number of unsuccessful attempts.

DUnsuccessful logon attempts are monitored by the security administrator.

Show Answer

Question: 3

Which of the following is a feature of an intrusion detection system (IDS)?

AGathering evidence on attack attempts

BIdentifying weaknesses in the policy definition

CBlocking access to particular sites on the Internet

DPreventing certain users from accessing specific servers

Show Answer

Question: 4

An IS auditor performing a telecommunication access control review should be concerned PRIMARILY with the:

Amaintenance of access logs of usage of various system resources.

Bauthorization and authentication of the user prior to granting access to system resources.

Cadequate protection of stored data on servers by encryption or other means.

Daccountability system and the ability to identify any terminal accessing system resources.

Show Answer

Question: 5

Which of the following is the MOST effective type of antivirus software?

AScanners

BActive monitors

Cintegrity checkers

DVaccines

Show Answer

Isaca CISA Quiz:170 Topic:3 Questions:846-850