Isaca CISA Quiz 473 Topic 6 Questions 2361-2365

Question: 1

Following a security breach, an IS auditor finds an organization's transport layer security (TLS) certificate is compromised. Which of the following would be the auditor's BEST recommendation to the system administrator?

ARe-issue TLS certificates with a new effective date

BDisable and retrieve the key from escrow

CRevoke and regenerate TLS certificates

DRepurchase the key from the certification authority (CA)

Show Answer

Question: 2

What is the MAIN objective when implementing security controls within an application?

ATo optimize user functionality of the application

BTo optimize the level of Data protection achieved against cost

CTo minimize reputational risk to the organization

DTo minimize the exposure to the fullest extent possible

Show Answer

Question: 3

Which of the following is the MOST effective way to verity an organization's ability to continue its essential business operations after a disruption event?

AAnalysis of business impact

BAnalysis of call trees

CAnalysis of recovery pout objectives (RPOs)

DAnalysis of end-to-end recovery flow

Show Answer

Question: 4

Which of the following would an IS auditor MOST likely recommend to ensure that an organization's IT systems are effectively kept up-to-date regarding vulnerabilities?

APatch management

BRisk management

CRelease management

DVersion management

Show Answer

Question: 5

Reports to the executive level concerning IT performance should focus on

Athird-party compliance with organizational practices

BIT performance m relation to operational improvements

CIT deliverables against organizational strategies

Dcapacity planning effectiveness within the organization

Show Answer

Isaca CISA Quiz:473 Topic:6 Questions:2361-2365