Isaca CISA Quiz 359 Topic 6 Questions 1791-1795

Question: 1

internal IS auditor recommends that incoming accounts payable payment files be encrypted. Which type of control is the auditor recommending?

ADirective

BDetective

CPreventive

DCorrective

Show Answer

Question: 2

Which of the following features can be provided only by asymmetric encryption?

AData confidentiality

BInformation privacy

CNonrepudiation

D128-bit key length

Show Answer

Question: 3

An organization plans to launch a social media presence as part of a new customer service campaign. Which of the following is the MOST significant risk from the perspective of potential litigation?

AApproved employees can use personal devices to post on the company $ behalf

BThere is a lack of dear procedures for responding to customers on social media outlets

CAccess to corporate-sponsored social media accounts requires only single-factor authentication.

DThe policy stating what employees can post on the organization s behalf is unclear.

Show Answer

Question: 4

Which of the following provides an IS auditor the MOST assurance that an organization is compliant with legal and regulatory requirements?

ASenior management has provided attestation of legal and regulatory compliance

BControls associated with legal and regulatory requirements have been identified and tested

CThere is no history of complaints or fines from regulators regarding noncompliance

DThe IT manager is responsible for the organization s compliance with legal and regulatory requirements.

Show Answer

Question: 5

When evaluating the recent implementation of an intrusion detection system (IDS), an IS auditor should be MOST concerned with inappropriate:

Atraining

Bencryption

Ctuning

Dpatching

Show Answer

Isaca CISA Quiz:359 Topic:6 Questions:1791-1795