Isaca CISA Quiz 496 Topic 7 Questions 2476-2480

Question: 1

What type of control is being used when an organization publishes standards and procedures for vulnerability management?

APreventive

BCorrective

CDirective

DDetective

Show Answer

Question: 2

Which of the following is MOST important for an auditor to consider when scoping for an IT general controls audit?

AFrequency of changes

BTiming of changes

CTypes of changes

DNumber of changes

Show Answer

Question: 3

Which of the following is the BEST control to reduce the likelihood that a spear phishing attack will be successful?

ATools for users to report suspicious emails and unusual financial transactions

BSpam filtering for emails containing external hyperlinks sent to mass recipient lists

CAutomated alerts to security managers identifying confidential information transferred externally

DEducation for staff and high-profile users on social engineering

Show Answer

Question: 4

Which of the following would BEST help management maintain a current and effective business continuity plan (BCP)?

AUpdate the critical business software list on an annual basis.

BPerform a periodic recovery test and include a lessons-learned summary.

CPerform an annual walk-through and verify resources at the recovery site.

DVerify vendor restore requirements are consistent with the recovery plan.

Show Answer

Question: 5

Which of the following tasks would cause the GREATEST segregation of duties (SoD) concern if performed by the person who reconciles the organization's device inventory?

ATracking devices used for spare parts

BApproving the issuing of devices

CCreating the device policy

DIssuing devices to employees

Show Answer

Isaca CISA Quiz:496 Topic:7 Questions:2476-2480