Isaca CISA Quiz 400 Topic 4 Questions 1996-2000

Question: 1

Which of the following is MOST important for an organization to review before sharing data with an external business partner via an application programming interface (API)?

AThe business partner's help desk incident tickets

BThe business partner's web application log files

CThe business partner's security practices

DThe business partner's data center access logs

Show Answer

Question: 2

Prior to the migration of acquired software into production, it is MOST important that the IS auditor review the:

Asystem documentation.

Bvendor testing report.

Cuser acceptance lest report.

Dsource code escrow agreement.

Show Answer

Question: 3

An IS auditor reviewing a recently implemented virtual environment notices discrepancies among similar machine setups. Which of the following should the auditor recommend to minimize configuration risks?

AImplement templates to manage rapid deployment of virtual machines.

BImplement network best practice recommendations.

CPerform hypervisor software updates with available patches to minimize security weaknesses.

DPerform architectural vulnerability analysis to compare current system attributes to a

Show Answer

Question: 4

A new regulatory standard for data privacy requires an organization to protect personally identifiable information (Pll). Which of the following is MOST important to include in the audit engagement plan to assess compliance with the new standard?

AReview of data protection procedures

BReview of data loss risk scenarios

CIdentification of IT systems that host Pll

DCertification of unencrypted Pll

Show Answer

Question: 5

In attribute sampling, what is the relationship between expected error rate and sample size?

AThe greater the expected error rate. The greater the sample size.

BThe greater the expected error rate, the smaller the sample size.

CThe greater the sample size, the tower The expected error rate.

DThe sample size is not affected by expected error rate.

Show Answer

Isaca CISA Quiz:400 Topic:4 Questions:1996-2000