Isaca CISA Quiz 474 Topic 4 Questions 2366-2370

Question: 1

Which of the following would BEST protect a network from a worm that exploits a publicly announced operating system vulnerability?

AAntivirus software

BHost security

CPatch management

DUser awareness and training

Show Answer

Question: 2

An external attacker spoofing an internal Internet protocol (IP) address can BEST be detected by which of the following?

AUsing static IP addresses for identification

BComparing the source address to the domain name server entry

CUsing a state table to compare the message states of each packet as it enters the system

DComparing the source address to the interface used as the entry point

Show Answer

Question: 3

Which of the following is MOST important to have in place before developing a disaster recovery plan (DRP)?

ASystem restoration procedures

BAppropriate insurance coverage

CA duplicate processing facility

DDefined acceptable downtime

Show Answer

Question: 4

Using development and operations (DevOps) processes an organization's IT department has automated the process of replacing application programming interlaces (APIs) m production with new versions. Which of the following controls would BEST reduce the risk of vulnerabilities in this situation?

AReview an up-to-dale inventory of APIs m production for completeness.

BReview API change requests to ensure appropriate authorization exists

CConduct API security testing prior to release into production

DExamine API log tiles to determine when changes occur in production

Show Answer

Question: 5

Which of the Which is the MOST effective control to reduce the risk of information leakage through social media'?

AUse of keystroke loggers

BSecurity awareness training

CPeriodic review of the data classification policy

DLimited access to social media sites in the workplace

Show Answer

Isaca CISA Quiz:474 Topic:4 Questions:2366-2370