Isaca CISA Quiz 187 Topic 3 Questions 931-935

Question: 1

When reviewing an organization's logical access security, which of the following should be of MOST concern to an IS auditor?

APasswords are not shared.

BPassword files are not encrypted.

CRedundant logon IDs are deleted.

DThe allocation of logon IDs is controlled.

Show Answer

Question: 2

Passwords should be:

Aassigned by the security administrator for first time logon.

Bchanged every 30 days at the discretion of the user.

Creused often to ensure the user does not forget the password.

Ddisplayed on the screen so that the user can ensure that it has been entered properly.

Show Answer

Question: 3

When performing an audit of access rights, an IS auditor should be suspicious of which of the following if allocated to a computer operator?

ARead access to data

BDelete access to transaction data files

CLogged read/execute access to programs

DUpdate access to job control language/script files

Show Answer

Question: 4

To prevent unauthorized entry to the data maintained in a dial-up, fast response system, an IS auditor should recommend:

Aonline terminals are placed in restricted areas.

Bonline terminals are equipped with key locks.

CID cards are required to gain access to online terminals.

Donline access is terminated after a specified number of unsuccessful attempts.

Show Answer

Question: 5

An IS auditor conducting an access control review in a client-server environment discovers that all printing options are accessible by all users. In this situation, the IS auditor is MOST likely to conclude that:

Aexposure is greater, since information is available to unauthorized users.

Boperating efficiency is enhanced, since anyone can print any report at any time.

Coperating procedures are more effective, since information is easily available.

Duser friendliness and flexibility is facilitated, since there is a smooth flow of information among
users.

Show Answer

Isaca CISA Quiz:187 Topic:3 Questions:931-935