Isaca CISA Quiz 148 Topic 6 Questions 736-740

Question: 1

The GREATEST risk posed by an improperly implemented intrusion prevention system (IPS) is:

Athat there will be too many alerts for system administrators to verify.

Bdecreased network performance due to IPS traffic.

Cthe blocking of critical systems or services due to false triggers.

Dreliance on specialized expertise within the IT organization.

Show Answer

Question: 2

The MOST effective control for reducing the risk related to phishing is:

Acentralized monitoring of systems.

Bincluding signatures for phishing in antivirus software.

Cpublishing the policy onantiphishing on the intranet.

Dsecurity training for all users.

Show Answer

Question: 3

When reviewing a digital certificate verification process, which of the following findings represents the MOST significant risk?

AThere is no registration authority (RA) for reporting key compromises.

BThe certificate revocation list (CRL) is not current.

CDigital certificates contain a public key that is used to encrypt messages and verify digital signatures.

DSubscribers report key compromises to the certificate authority (CA).

Show Answer

Question: 4

When using a digital signature, the message digest is computed:

Aonly by the sender.

Bonly by the receiver.

Cby both the sender and the receiver.

Dby the certificate authority (CA).

Show Answer

Question: 5

Which of the following would effectively verify the originator of a transaction?

AUsing a secret password between the originator and the receiver

BEncrypting the transaction with the receiver's public key

CUsing a portable document format (PDF) to encapsulate transaction content

DDigitally signing the transaction with the source's private key

Show Answer

Isaca CISA Quiz:148 Topic:6 Questions:736-740