Isaca CISA Quiz 250 Topic 6 Questions 1246-1250

Question: 1

Which of the following is the GREATEST risk of an inadequate policy definition for ownership of data and systems?

AUser management coordination does not exist.

BSpecific user accountability cannot be established.

CUnauthorized users may have access to originate, modify or delete data.

DAudit recommendations may not be implemented.

Show Answer

Question: 2

The PRIMARY objective of an audit of IT security policies is to ensure that:

Athey are distributed and available to all staff.

Bsecurity and control policies support business and IT objectives.

Cthere is a published organizational chart with functional descriptions.

Dduties are appropriately segregated.

Show Answer

Question: 3

An IS auditor finds that not all employees are aware of the enterprise's information security policy. The IS auditor should conclude that:

Athis lack of knowledge may lead to unintentional disclosure of sensitive information.

Binformation security is not critical to all functions.

CIS audit should provide security training to the employees.

Dthe audit finding will cause management to provide continuous training to staff.

Show Answer

Question: 4

The development of an IS security policy is ultimately the responsibility of the:

AIS department.

Bsecurity committee.

Csecurity administrator.

Dboard of directors.

Show Answer

Question: 5

Which of the following programs would a sound information security policy MOST likely include to handle suspected intrusions?

AResponse

BCorrection

CDetection

DMonitoring

Show Answer

Isaca CISA Quiz:250 Topic:6 Questions:1246-1250