Isaca CISA Quiz 575 Topic 4 Questions 2871-2875

Question: 1

Which of the following falls within the scope of an information security governance committee?

ASelecting the organization's external security auditors

BApproving access to critical financial systems

CReviewing content for information security awareness programs

DPrioritizing information security technology initiatives

Show Answer

Question: 2

Which of the following is the BEST way for an IS auditor to reduce sampling risk when performing audit sampling to verify the adequacy of an organization's internal controls?

ALower the sample standard deviation

BDecrease the sampling size

COutsource the sampling process.

DUse a statistical sampling method

Show Answer

Question: 3

Which of the following is the GREATEST advantage of vulnerability scanning over penetration testing'?

AThe testing process can be automated to cover large groups of assets

BNetwork bandwidth is utilized more efficiently.

CCustom-developed applications can be tested more accurately

DThe testing produces a lower number of false positive results

Show Answer

Question: 4

Which of the following are examples of detective controls?

AUse of access control software and deploying encryption software

BSource code review and echo checks in telecommunications

CCheck points in production jobs and rerun procedures

DContinuity of operations planning and backup procedures

Show Answer

Question: 5

An IS auditor is reviewing the implementation of an international quality management standard Which of the following provides the BEST evidence that quality management objectives have been achieved?

AReduction in risk profile

BQuality assurance (QA) documentation

CMeasurable processes

DEnhanced compliance with laws and regulations

Show Answer

Isaca CISA Quiz:575 Topic:4 Questions:2871-2875