Isaca CISA Quiz 374 Topic 4 Questions 1866-1870

Question: 1

A security review reveals an organization b struggling with a large number of findings from vulnerability scans. What should the IS auditor recommend be done FIRST.

ARemediate vulnerabilities for the most critical systems

BConduct penetration tests to confirm critical findings.

CRemediate issues that are rated as most critical

DAddress gaps for all internally developed applications

Show Answer

Question: 2

Which of the following types of controls would BEST facilitate a root cause analysis for an information security incident?

ACorrective

BPreventive

CDetective

DDirective

Show Answer

Question: 3

The maturity level of an organization s problem management support function is optimized when the function

Ahas formally documented the escalation process.

Bproactively provides solutions

Cresolves requests in a timely manner

Danalyzes critical incidents to identify root cause.

Show Answer

Question: 4

Which of the following would BEST enable an IS auditor to perform an audit that requires testing the full population of data?

AExpertise in statistical sampling of data

BProficiency in the use of data analytics tools

CExperience in database administration

DProficiency in programming and coding

Show Answer

Question: 5

Which of the following is the GREATEST concern associated with migrating computing resources to a cloud virtualized environment?

AAn increase in inherent vulnerability

BAn increase in residual risk

CAn increase in the potential for data leakage

DAn increase in the number of e-discovery requests

Show Answer

Isaca CISA Quiz:374 Topic:4 Questions:1866-1870