Isaca CISA Quiz 431 Topic 7 Questions 2151-2155

Question: 1

Which of the following procedures should be implemented prior to disposing of surplus computer equipment to employees?

AOverwrite the hard drive with random data.

BUse operating system commands to delete all files from the hard drive.

CUse application delete commands to remove files.

DHave the employee receiving the machine sign a nondisclosure agreement.

Show Answer

Question: 2

Which of the following BEST demonstrates to an IS auditor that an organization has implemented effective risk management processes?

ACritical business assets have additional controls.

BThe risk register is reviewed periodically.

CA business impact analysis (BIA) has been completed.

DThe inventory of IT assets includes asset classification.

Show Answer

Question: 3

A development team has designed a new application and incorporated best practices for secure coding. Prior to launch, which of the following is the IS auditor's BEST recommendation to mitigate the associated security risk?

AIntegration testing

BUnit testing

CPenetration testing

DUser acceptance testing

Show Answer

Question: 4

Which of the following activities is MOST important to consider when conducting IS audit planning?

AAudit scheduling is based on skill set of audit team.

BResources are allocated to areas of high risk.

CThe audit committee agrees on risk rankings.

DResults from previous audits are reviewed.

Show Answer

Question: 5

Which of the following is the BEST method for uncovering shadow IT within an organization?

AAnalyze help desk tickets.

BReview secondary approval thresholds.

CUse a cloud access security broker (CASB).

DReview business processes.

Show Answer

Isaca CISA Quiz:431 Topic:7 Questions:2151-2155