Isaca CISA Quiz 570 Topic 6 Questions 2846-2850

Question: 1

Which of the following focus areas is a responsibility of IT management rather than IT governance?

AIT controls implementation

BRisk optimization

CIT resource optimization

DBenefits realization

Show Answer

Question: 2

Which of the following is the GREATEST advantage of application penetration testing over vulnerability scanning?

APenetration testing can be conducted in a relatively short time period.

BPenetration testing creates relatively smaller risks to application availability and integrity

CPenetration testing provides a more accurate picture of gaps in application controls

DPenetration testing does not require a special skill set to be executed.

Show Answer

Question: 3

When evaluating the management practices at a third-party organization providing outsourced services, the IS auditor considers relying on an independent auditors report. The IS auditor.....

Adetermine if recommendations have been implemented

Breview the objectives of the audit

Cexamine the independent auditor's workpapers.

Ddiscuss the report with the independent auditor

Show Answer

Question: 4

Which of the following is the PRIMARY risk when business units procure IT assets without IT involvement?

AData security requirements are not considered.

BThe business units want IT to be responsible for maintenance costs

CCorporate procurement standards are not followed

DSystem inventory becomes inaccurate.

Show Answer

Question: 5

Of the following, who should approve a release to a critical application that would make the application inaccessible for 24 hours?

ABusiness process owner

BData custodian

CProject manager

DChief information security officer (CISO)

Show Answer

Isaca CISA Quiz:570 Topic:6 Questions:2846-2850