Isaca CISA Quiz 392 Topic 4 Questions 1956-1960

Question: 1

Which of the following is the BEST source for describing the objectives of an organization s information systems?

AIT management

BBusiness process owners

CInformation security management

DEnd users

Show Answer

Question: 2

A start-up company acquiring for its order-taking system is unable to predict the volume of transactions. Which of the following is MOST important for the company to consider?

AConfiguration

BOptimization

CCompatibility

DScalability

Show Answer

Question: 3

Which of the following is MOST likely to enable a hacker to successfully penetrate a system?

AUnpatched software

BDecentralized dialup access

CLack of DoS protection

DLack of virus protection

Show Answer

Question: 4

Which of the following should be the MOST important consideration when establishing data classification standards?

AReporting metrics are established.

BAn education campaign is established upon rollout.

CThe standards comply with relevant regulations.

DManagement supports the newly developed standards

Show Answer

Question: 5

The CIO of an organization is concerned that the information security policies may not be comprehensive. Which of the following should an IS auditor recommend be performed FIRST?

ADetermine if there is j process to handle exceptions to the policies

BEstablish a governance board to track compliance with the policies

CObtain a copy of their competitor's policies

DCompare the policies against an industry framework.

Show Answer

Isaca CISA Quiz:392 Topic:4 Questions:1956-1960