Isaca CISA Quiz 177 Topic 7 Questions 881-885

Question: 1

An IS auditor should expect the responsibility for authorizing access rights to production data and systems to be entrusted to the:

Aprocess owners.

Bsystem administrators.

Csecurity administrator.

Ddata owners.

Show Answer

Question: 2

An IS auditor has completed a network audit. Which of the following is the MOST significant logical security finding?

ANetwork workstations are not disabled automatically after a period of inactivity.

BWiring closets are left unlocked

CNetwork operating manuals and documentation are not properly secured.

DNetwork components are not equipped with an uninterruptible power supply.

Show Answer

Question: 3

Which of the following would MOST effectively enhance the security of a challenge-response based authentication system?

ASelecting a more robust algorithm to generate challenge strings

Bimplementing measures to prevent session hijacking attacks

Cincreasing the frequency of associated password changes

Dincreasing the length of authentication strings

Show Answer

Question: 4

Which of the following should an IS auditor recommend for the protection of specific sensitive information stored in the data warehouse?

Aimplement column- and row-level permissions

BEnhance user authentication via strong passwords

COrganize the data warehouse into subject matter-specific databases

DLog user access to the data warehouse

Show Answer

Question: 5

The responsibility for authorizing access to a business application system belongs to the:

Adata owner.

Bsecurity administrator.

CIT security manager.

Drequestor's immediate supervisor.

Show Answer

Isaca CISA Quiz:177 Topic:7 Questions:881-885