Isaca CISA Quiz 381 Topic 5 Questions 1901-1905

Question: 1

Which of the following entities is BEST suited to define the data classification levels within an organization?

ABusiness owner responsible for the respective data

BDatabase administrator based on the data schema

CSystem administrate responsible for data security controls

DLegal compliance team based on the applicable regulations

Show Answer

Question: 2

Following the sale of a business division, employees will be transferred to a new organization, but they will retain access to IT equipment from the previous employer. An IS auditor has recommended that both organizations agree to and document an acceptable use policy for the equipment. What type of control has been recommended?

ADetective control

BDirective control

CPreventive control

DCorrective control

Show Answer

Question: 3

Which of the following will BEST help to ensure that an in-house application in the production environment is current?

AVersion control procedures

BChange management

CProduction access control

DQuality assurance

Show Answer

Question: 4

What is the BEST indicator of successful implementation of an organization s information security policy?

AReduced number of noncompliance penalties incurred

BReduced number of successful phishing incidents

CReduced number of help desk calls

DReduced number of false-positive security events

Show Answer

Question: 5

An IS auditor auditing the effectiveness of utilizing a hot site will MOST likely:

Areview reciprocal agreements

Breview logical access controls

Cevaluate physical access control

Danalyze system restoration procedures

Show Answer

Isaca CISA Quiz:381 Topic:5 Questions:1901-1905