Isaca CISA Quiz 425 Topic 7 Questions 2121-2125

Question: 1

An enterprise receiving email should have procedures to control:

Ainsufficient connectivity,

Boutdated protocols,

Cinsufficient end-points.

Dunsolicited executable code.

Show Answer

Question: 2

Which of the following controls would BEST decrease the exposure if a password is compromised?

APassword changes are forced periodically.

BPasswords are encrypted.

CPasswords are masked.

DPasswords have format restrictions.

Show Answer

Question: 3

An existing system is being replaced with a new application package. User acceptance testing (UAT) should ensure that:

Athe new system functions as expected.

Bdata from the old system has been converted correctly

Cthere is a business need for the new system.

Dthe new system is better than the old system.

Show Answer

Question: 4

During an external assessment of network vulnerability, which of the following activities should be performed FIRST?

AMonitor the network.

BImplement an intrusion detection system (IDS).

CCollect network information.

DReview policies.

Show Answer

Question: 5

In a decentralized organization, the selection and purchase of IS products is acceptable as long as which of the following conditions exists?

AAcquired items are consistent with the organization's short- and long-term IS strategy plans.

BManagers undertake a full cost-benefit analysis before deciding what to purchase.

CVarious offices are independent and exchange data on an occasional basis.

DThe same operating system is used throughout the organization.

Show Answer

Isaca CISA Quiz:425 Topic:7 Questions:2121-2125