Isaca CISA Quiz 68 Topic 7 Questions 336-340

Question: 1

Due to a recent business divestiture, an organization has limited IT resources to deliver critical projects. Reviewing the IT staffing plan against which of the following would BEST guide IT management when estimating resource requirements for future projects?

APeer organization staffing benchmarks

BRecords of actual time spent on projects

CHuman resources (HR) sourcing strategy

Dbudgeted forecast for the next financial year

Show Answer

Question: 2

Which of the following is the BEST way to mitigate the risk associated with technology obsolescence?

ACreate a technology watch team that evaluates emerging trends.

BMake provisions in the budgets for potential upgrades

CInvest in current technology

DCreate tactical and strategic IS plans

Show Answer

Question: 3

Which of the following approaches would BEST ensure that data protection controls are embedded into software being developed?

AImplementing a quality assurance (QA) process during the development phase

BUtilizing a data protection template for user acceptance testing (UAT)

CTracking data protection requirements throughout the SDLC

DDeriving data protection requirements from key stakeholders

Show Answer

Question: 4

An IS auditor performing a review of a newly purchased software program notes that an escrow agreement has been executed for acquiring the source code. What is MOST important for the IS auditor to verify?

AThe source code is being updated for each change

BThe vendor Is financially viable

CThe source code is being held by an independent third party

DProduct acceptance testing has been completed.

Show Answer

Question: 5

Which of the following is the MOST important prerequisite for implementing a data loss prevention (DLP) tool?

ARequiring users to save files in secured folders instead of a company-wide shared drive

BReviewing data transfer logs to determine historical patterns of data flow

CIdentifying where existing data resides and establishing a data classification matrix

DDeveloping a DLP policy and requiring signed acknowledgment by users

Show Answer

Isaca CISA Quiz:68 Topic:7 Questions:336-340