Isaca CISA Quiz 338 Topic 5 Questions 1686-1690

Question: 1

Which of the following is the FIRST consideration when developing a data retention policy?

ADetermining the backup cycle based on retention period

BDesigning an infrastructure storage strategy

CIdentifying the legal and contractual retention period for data

DDetermining the security access privileges to the data

Show Answer

Question: 2

Which of the following is the MOST important factor when an organization is developing information security policies and procedures?

ACompliance with relevant regulations

BCross-references between policies and procedures

CInclusion of mission and objectives

DConsultation with management

Show Answer

Question: 3

Which of the following is the MOST likely cause of a successful firewall penetration?

AUse of a Trojan to bypass the firewall

BLoophole m firewall vendor's code

CVirus infection

DFirewall misconfiguration by the administrator

Show Answer

Question: 4

Intrusion detection systems (IDSs) can:

Asubstitute for a firewall.

Bcompensate for weak authentication mechanisms

Cconduct investigations of attacks from within the network

Dprovide information to enhance the security infrastructure.

Show Answer

Question: 5

To BEST evaluate the effectiveness of a disaster recovery plan, the IS auditor should review the:

Atest plan and results of past tests.

Bplans and procedures in the business continuity plan

Ccapacity of backup facilities.

Dhardware and software inventory.

Show Answer

Isaca CISA Quiz:338 Topic:5 Questions:1686-1690