Isaca CISA Quiz 582 Topic 5 Questions 2906-2910

Question: 1

Which of the following is the BEST way to confirm that a digital signature is valid?

AConfirm that the sender's public key certificate is from a trusted certificate authority (CA).

BCompare the hash value of the digital signature manually

CVerify the digital signature by obtaining the senders public key

DRequest a valid private key from the sender and compare it with the public key

Show Answer

Question: 2

Which of the following provides an IS auditor with the BEST evidence that a system has been assessed for known exploits?

APatch cycle report

BVulnerability scanning report

CBlack box testing report

DWhite box testing report

Show Answer

Question: 3

In a situation where the recovery point objective (RPO) is 0 for an online transaction processing system, which of the following is MOST important for an IS auditor to verify?

AThe application has a clustered architecture to ensure high availability

BSynchronous data mirroring is implemented between the data centers

CIT is able to recover system functionality in the shortest possible time frame

DDaily backups are created and backup media are verified

Show Answer

Question: 4

Which of the following should be the FIRST step in an organization's forensics process to preserve evidence?

ACreate the forensics analysis reporting template

BDetermine which forensic tools to use

CPerform analytics on digital evidence obtained using forensic methods

DDuplicate digital evidence and validate it using a hash function

Show Answer

Question: 5

The PRIMARY reason to follow up on prior-year audit reports is to determine if

Aprior-year recommendations have become irrelevant

Bsignificant changes to the control environment have occurred

Cidentified control weaknesses have been addressed

Dinherent risks have changed

Show Answer

Isaca CISA Quiz:582 Topic:5 Questions:2906-2910