Isaca CISA Quiz 201 Topic 7 Questions 1001-1005

Question: 1

The purpose of code signing is to provide assurance that:

Athe software has not been subsequently modified.

Bthe application can safely interface with another signed application.

Cthe signer of the application is trusted.

Dthe private key of the signer has not been compromised.

Show Answer

Question: 2

An IS auditor should recommend the use of library control software to provide reasonable assurance that:

Aprogram changes have been authorized.

Bonly thoroughly tested programs are released.

Cmodified programs are automatically moved to production.

Dsource and executable code integrity is maintained.

Show Answer

Question: 3

An organization has recently installed a security patch, which crashed the production server. To minimize the probability of this occurring again, an IS auditor should:

Aapply the patch according to the patch's release notes.

Bensure that a good change management process is in place.

Cthoroughly test the patch before sending it to production.

Dapprove the patch after doing a risk assessment.

Show Answer

Question: 4

When reviewing procedures for emergency changes to programs, the IS auditor should verify that the procedures:

Aallow changes, which will be completed using after-the-fact follow-up.

Ballow undocumented changes directly to the production library.

Cdo not allow any emergency changes.

Dallow programmers permanent access to production programs.

Show Answer

Question: 5

To determine if unauthorized changes have been made to production code the BEST audit procedure is to:

Aexamine the change control system records and trace them forward to object code files.

Breview access control permissions operating within the production program libraries.

Cexamine object code to find instances of changes and trace them back to change control records.

Dreview change approved designations established within the change control system.

Show Answer

Isaca CISA Quiz:201 Topic:7 Questions:1001-1005