Isaca CISA Quiz 584 Topic 7 Questions 2916-2920

Question: 1

Which of the following observations should be of GREATEST concern to an IS auditor reviewing a large organization's virtualization environment?

AAn unused printer has been left connected to the host system.

BGuest tools have been installed without sufficient access control,

CA rootkit was found on the host operating system

DHost inspection capabilities have been disabled

Show Answer

Question: 2

Which of the following is a corrective control that reduces the impact of a threat event?

ABusiness process analysis

BSecurity policy

CBusiness continuity plan (BCP)

DSegregation of duties (SoD)

Show Answer

Question: 3

Which of the following physical controls will MOST effectively prevent breaches of computer room security?

APhoto IDs

BCCTV monitoring

CRetina scanner

DRFID badge

Show Answer

Question: 4

Disciplinary policies are BEST classified as.

Acompensating controls

Bpreventive controls.

Cdirective controls

Dcorrective controls

Show Answer

Question: 5

An IS auditor is reviewing the change management process in a large IT service organization. Which of the following observations would be the GREATEST concern?

AEmergency software releases are not fully documented after implementation

BUser acceptance testing (UAT) can be waived in case of emergency software releases

CCode is migrated manually into production during emergency software releases

DA senior developer has permanent access to promote code for emergency software releases

Show Answer

Isaca CISA Quiz:584 Topic:7 Questions:2916-2920