Isaca CISA Quiz 186 Topic 7 Questions 926-930

Question: 1

Sign-on procedures include the creation of a unique user ID and password. However, an IS auditor discovers that in many cases the username and password are the same. The BEST control to mitigate this risk is to:

Achange the company's security policy.

Beducate users about the risk of weak passwords.

Cbuild in validations to prevent this during user creation and password change.

Drequire a periodic review of matching user ID and passwords for detection and correction.

Show Answer

Question: 2

The PRIMARY objective of a logical access control review is to:

Areview access controls provided through software.

Bensure access is granted per the organization's authorities.

Cwalk through and assess the access provided in the IT environment.

Dprovide assurance that computer hardware is adequately protected against abuse.

Show Answer

Question: 3

Naming conventions for system resources are important for access control because they:

Aensure that resource names are not ambiguous.

Breduce the number of rules required to adequately protect resources.

Censure that user access to resources is clearly and uniquely identified.

Densure that internationally recognized names are used to protect resources.

Show Answer

Question: 4

Which of the following exposures could be caused by a line grabbing technique?

AUnauthorized data access

BExcessive CPU cycle usage

CLockout of terminal polling

DMultiplexor control dysfunction

Show Answer

Question: 5

Electromagnetic emissions from a terminal represent an exposure because they:

Aaffect noise pollution.

Bdisrupt processor functions.

Cproduce dangerous levels of electric current.

Dcan be detected and displayed.

Show Answer

Isaca CISA Quiz:186 Topic:7 Questions:926-930