Isaca CISA Quiz 184 Topic 4 Questions 916-920

Question: 1

The reliability of an application system's audit trail may be questionable if:

Auser IDs are recorded in the audit trail.

Bthe security administrator has read-only rights to the audit file.

Cdate and time stamps are recorded when an action occurs.

Dusers can amend audit trail records when correcting system errors.

Show Answer

Question: 2

Which of the following user profiles should be of MOST concern to an IS auditor when performing an audit of an EFT system?

AThree users with the ability to capture and verify their own messages

BFive users with the ability to capture and send their own messages

CFive users with the ability to verify other users and to send their own messages

DThree users with the ability to capture and verify the messages of other users and to send their
own messages

Show Answer

Question: 3

An IS auditor performing an independent classification of systems should consider a situation where functions could be performed manually at a tolerable cost for an extended period of time as:

Acritical.

Bvital.

Csensitive.

Dnoncritical.

Show Answer

Question: 4

The implementation of access controls FIRST requires:

Aa classification of IS resources.

Bthe labeling of IS resources.

Cthe creation of an access control list.

Dan inventory of IS resources.

Show Answer

Question: 5

Which of the following is an example of the defense in-depth security principle?

AUsing two firewalls of different vendors to consecutively check the incoming network traffic

BUsing a firewall as well as logical access controls on the hosts to control incoming network traffic

CHaving no physical signs on the outside of a computer center building

DUsing two firewalls in parallel to check different types of incoming traffic

Show Answer

Isaca CISA Quiz:184 Topic:4 Questions:916-920