Isaca CISA Quiz 452 Topic 4 Questions 2256-2260

Question: 1

A user of a telephone banking system has forgotten his personal identification number (PIN), after the user has been authenticated, the BEST method of issuing a new pin is to have:

AA randomly generated pin communicated by banking personnel

BBanking personnel assign the user a new PIN via email

CThe user enter a new PIN twice

DBanking personnel verbally assign a new PIN

Show Answer

Question: 2

Which of the following is the most effective control for emergency changes to application programs?

APreparing and approving program change forms before the changes are made

BPeriodically checking the application program libraries to detect whether unauthorized changes have been made

CProcessing the change through change control with review of the change the following key

DKeeping a sealed envelope containing a passwords that operator can use to make emergency changes

Show Answer

Question: 3

When introducing a maturity model to the IT management process, it is BEST to align the maturity level to a point that reflects which of the following?

AIdeal business production level

BIndustry standard practice level

CMinimum cost expenditure level

DMaximum risk tolerance level

Show Answer

Question: 4

When reviewing a disaster recovery plan (DRP) an IS auditor should examine the:

AUninterruptible power supply (UPS)

BAccess to the computer site by the backup staff

CFire-fighting equipment

DOffsite data file storage

Show Answer

Question: 5

An organization's plans to implement a virtualization strategy enabling multiple operating systems on a single host. Which of the following should be the GREATEST concern with this strategy?

AApplication performance

BNetwork bandwidth

CAdequate storage space

DComplexity of administration

Show Answer

Isaca CISA Quiz:452 Topic:4 Questions:2256-2260