Isaca CISA Quiz 489 Topic 5 Questions 2441-2445

Question: 1

Which of the following is MOST important to consider when determining the nature and extent of audit follow-up activities?

AThe amount of turn over within operations management

BThe number of unimplemented recommendations that are no longer relevant

CThe status of actions taken by the auditee to implement recommendations

DThe experience and availability of audit staff

Show Answer

Question: 2

An organization was severely impacted alter an advanced persistent threat (APT) attack Afterwards it was found that the initial breach happened a month prior to the attack. Management's GREATEST concern should be

Aexternal firewall policies.

Bthe installation of critical security patches

Cresults of the past internal penetration test

Dthe effectiveness of monitoring processes

Show Answer

Question: 3

Which of the following is the PRIMARY benefit of using a capability maturity model?

AIt provides detailed changes management strategies for performance improvement.

BIt helps the organization estimate how long it will lake to reach the highest level of maturity in each area

CIt provides a way to compare against similar organizations' maturity levels

DIt helps the organization develop a roadmap toward its desired level of n each area

Show Answer

Question: 4

Which of the following controls would BEST enable IT management: to detect shadow IT within the organization?

AEnterprise data on mobile devices is encrypted

BHelp desk calls and incidents are reviewed

CProxy restrictions are in place

DUnauthorized network and email traffic is restricted

Show Answer

Question: 5

Which of the following should be included in a business impact analysis (BIA)

Aidentification of IT resources that support key business processes

BRecovery strategy for significant business interruptions

CSupport documentation for the recovery alternative

DRoles and responsibilities for the business continuity process

Show Answer

Isaca CISA Quiz:489 Topic:5 Questions:2441-2445