Isaca CISA Quiz 547 Topic 6 Questions 2731-2735

Question: 1

Which of the following test approaches would utilize data analytics to validate customer authentication controls for banking transactions?

AEvaluate configuration settings for transactions requiring customer identification.

BReview the business requirements document for customer identification requirements.

CReview transactions completed for one period that have blank customer identification fields.

DAttempt to complete a monetary transaction and leave the customer identification fields blank.

Show Answer

Question: 2

Which of the following is the BEST method to assess the adequacy of security awareness in an organization?

AConfirming a security awareness program exists

BInterviewing employees about security responsibility

CAdministering security survey questionnaires

DObserving employee security behaviors

Show Answer

Question: 3

Which combination of access controls provides the BEST physical protection for a server room?

AUser ID and PIN

BPIN and smart card

CCard with a magnetic stop and a shared PIN

DCard with a magnetic strip and a smart card

Show Answer

Question: 4

In an IS auditor's review of an organization s configuration management practices for software, which of the following is MOST important?

APost-implementation review reports from development efforts

BService level agreements (SLAs) between the IT function and users

COrganizational policies related to release management

DSoftware rental contracts or lease agreements

Show Answer

Question: 5

An organization with high security requirements is evaluating the effectiveness of biometric systems. Which of the following performance indicators is MOST important?

AFalse-identification rate (FIR)

BEqual-error rate (EER)

CFalse-rejection rate (FRR)

DFalse-acceptance rate (FAR)

Show Answer

Isaca CISA Quiz:547 Topic:6 Questions:2731-2735