Isaca CISA Quiz 336 Topic 6 Questions 1676-1680

Question: 1

Which of the following factors will BEST promote effective information security management?

ASenior management commitment

BIdentification and risk assessment of sensitive resources

CSecurity awareness training

DSecurity policy framework

Show Answer

Question: 2

When designing metrics for information security, the MOST important consideration is that the metrics:

Atrack trends over time.

Bapply to all business units.

Care easy to understand.

Dprovide actionable data.

Show Answer

Question: 3

During an audit of a mission-critical system hosted in an outsourced data center, an IS auditor discovers that contracted routine maintenance for the alternate power generator was not performed. Which of the following should be the auditor's MAIN concern?

AFraudulent behavior by the outsourcer charging for work not performed

BFailure of the alternate power generator during a power outage

CHigh repair costs if faulty generator parts are not detected in a timely manner

DLoss of warranty due to lack of system maintenance

Show Answer

Question: 4

An IS auditor is conducting a pre-implementation review to determine a new system's production readiness. The auditor's PRIMARY concern should be whether:

Abenefits realization has been evidenced

Bthere are unresolved high-risk items

Cthe project adhered to the budget and target date.

Dusers were involved in the quality assurance (QA) testing.

Show Answer

Question: 5

When auditing the IT governance of an organization planning to outsource a critical financial application to a cloud vendor, the MOST important consideration for the auditor should be:

Athe cost of the outsourced system.

Bthe inclusion of a service termination clause.

Calignment with industry standards.

Dalignment with business requirements.

Show Answer

Isaca CISA Quiz:336 Topic:6 Questions:1676-1680