Isaca CISA Quiz 249 Topic 7 Questions 1241-1245

Question: 1

Which of the following should be included in an organization's IS security policy?

AA list of key IT resources to be secured

BThe basis for access authorization

CIdentity of sensitive security features

DRelevant software security features

Show Answer

Question: 2

Which of the following is the initial step in creating a firewall policy?

AA cost-benefit analysis of methods for securing the applications

BIdentification of network applications to be externally accessed

CIdentification of vulnerabilities associated with network applications to be externally accessed

DCreation of an applications traffic matrix showing protection methods

Show Answer

Question: 3

The management of an organization has decided to establish a security awareness program. Which of the following would MOST likely be a part of the program?

AUtilization of an intrusion detection system to report incidents

BMandating the use of passwords to access all software

CInstalling an efficient user log system to track the actions of each user

DTraining provided on a regular basis to all current and new employees

Show Answer

Question: 4

Which of the following is MOST critical for the successful implementation and maintenance of a security policy?

AAssimilation of the framework and intent of a written security policy by all appropriate parties

BManagement support and approval for the implementation and maintenance of a security policy

CEnforcement of security rules by providing punitive actions for any violation of security rules

DStringent implementation, monitoring and enforcing of rules by the security officer through access control software

Show Answer

Question: 5

A comprehensive and effective e-mail policy should address the issues of e-mail structure, policy enforcement, monitoring and:

Arecovery.

Bretention.

Crebuilding.

Dreuse.

Show Answer

Isaca CISA Quiz:249 Topic:7 Questions:1241-1245