Isaca CISA Quiz 494 Topic 4 Questions 2466-2470

Question: 1

Which of the following is the BEST control to detect errors in an accounts payable system?

AAlignment of the process to business objectives

BInput validation

CQuality control review of new payments

DManagement approval of payments

Show Answer

Question: 2

Which of the following is the BEST indication that an organization's security incident and event monitoring (SIEM) capability is operating effectively?

ASecurity event logging is centralized.

BSecurity event logging policies are defined.

CSecurity event logging is enabled for individual applications.

DSecurity event logging is correlated across multiple applications.

Show Answer

Question: 3

Which of the following would BEST indicate a mature information security program within an organization?

AA decrease in the cost of the IT security program

BA decrease in the average time to remediate vulnerabilities

CA decrease in time from incident identification to containment

DA decrease in the number of attempted attacks per month

Show Answer

Question: 4

Which of the following risk management activities is MOST important to complete before implementing an enterprise resource planning (ERP) system?

AOptimize business process designs

BValidate compliance with applicable local financial regulations.

CDefine the organization's control objectives.

DAppoint an independent risk advisory firm to provide support.

Show Answer

Question: 5

An IS auditor identified hard-coded credentials within the source code of recently developed software when evaluating its readiness for implementation. Which of following would be the auditor's BEST recommendation?

AEnsure source code reviews and debugging are performed and documented

BEnsure revisions of source code can be tracked and rollback can be performed.

CEnsure documented evidence of source code being kept in escrow is retained.

DEnsure log reports are retained of all persons updating software source code.

Show Answer

Isaca CISA Quiz:494 Topic:4 Questions:2466-2470