Isaca CISA Quiz 330 Topic 6 Questions 1646-1650

Question: 1

Which of the following BEST ensures that only authorized software is moved into a production environment?

ARestricting read/write access to production code to computer programmers only

BAssigning programming managers to transfer tested programs to production

CA librarian compiling source code into production after independent testing

DRequiring programming staff to move tested code into production

Show Answer

Question: 2

In a follow-up audit, an IS auditor notes that management has addressed the original findings in a different way than originally agreed upon. The auditor should FIRST:

Aescalate the deviation to the audit committee.

Bmark the recommendation as satisfied and close the finding.

Cverify if management's action mitigates the identified risk

Dre-perform the audit to assess the changed control environment

Show Answer

Question: 3

Which of the following is a detective control that can be used to uncover unauthorized access to information systems?

ARequiring long and complex passwords for system access

BImplementing a security information and event management (SIEM) system

CRequiring internal audit to perform penodic reviews of system access logs

DProtecting access to the data center with multif actor authentication

Show Answer

Question: 4

Which of the following control checks would utilize data analytics?

AEvaluating configuration settings for the credit card application system

BReviewing credit card applications submitted in the past month for blank data fields

CAttempting to submit credit card applications with blank data fields

DReviewing the business requirements document for the credit card application system

Show Answer

Question: 5

A web application is developed in-house by an organization. Which of the following would provide the BEST evidence to an IS auditor that the application is secure from external attack?

ACode review by a third party

BWeb application firewall implementation

CPenetration test results

DDatabase application monitoring logs

Show Answer

Isaca CISA Quiz:330 Topic:6 Questions:1646-1650