Isaca CISA Quiz 477 Topic 6 Questions 2381-2385

Question: 1

Which of the blowing should be the GREATEST concern to an IS auditor reviewing the information security framework of an organization?

ASenior management was not involved in the development of the information security policy

BThe information security policy is not aligned with regulatory requirements

CThe information security policy has not been updated in the last two years

DA list of critical information assets was not included in the information security

Show Answer

Question: 2

Which of the following is the BEST way to help ensure that products developed in an agile software development environment meet the required quality standards?

APerform unit testing the end of the development

BReview test scripts approved by product owners

CFocus tests on mandated regulatory requirements

DImplement automated testing of code

Show Answer

Question: 3

The process of applying a hash function to a message, and obtaining and ciphering a digest refers to:

Apublic key infrastructure (PKI).

Bauthentication.

Cdigital certificates.

Ddigital signatures.

Show Answer

Question: 4

Which of the following is the MOST important aspect of a board-approved information security policy?

AThe policy is communicated to all stakeholders.

BThe policy provides guidance for asset classification.

CThe policy provides detailed guidance for privacy compliance.

DThe policy is reviewed periodically.

Show Answer

Question: 5

Which of the following is MOST effective in detecting an intrusion attempt?

AUsing smart cards with one-time passwords

BUsing packet fitter software

CAnalyzing system logs

DInstalling biometrics-based authentication

Show Answer

Isaca CISA Quiz:477 Topic:6 Questions:2381-2385