Isaca CISA Quiz 428 Topic 8 Questions 2136-2140

Question: 1

Which of the following is the BEST method for converting a file into a format suitable for data analysis in a forensic investigation?

AImaging

BExtraction

CData acquisition

DNormalization

Show Answer

Question: 2

An IS auditor observes an organization is performing data backup and restoration testing on an ad hoc basis without a defined process. What is the MOST likely result of a data disruption event?

AIncreased loss impact

BIncreased likelihood of future risk events

CDecreased data integrity

DDecreased data confidentiality

Show Answer

Question: 3

Which of the following management decisions presents the GREATEST risk associated with data leakage?

ASecurity awareness training is not provided to staff.

BThere is no requirement for desktops to be encrypted.

CSecurity policies have not been updated in the past year

DStaff are allowed to work remotely.

Show Answer

Question: 4

In the IT department where segregation of duties is not feasible due to a limited number of resources, a team member is performing the functions of computer operator and reviewer of application logs. Which of the following would be the IS auditor's BEST recommendation?

APrevent the operator from performing application development activities.

BRestrict the computer operator's access to the production environment

CAssign an independent second reviewer to verify the application logs.

DDevelop procedures to verify that the application logs are not modified.

Show Answer

Question: 5

Which of the following is MOST important for the IS auditor to verify when reviewing the development process of a security policy?

AEvidence of active involvement of key stakeholders

BEvidence of management approval

CIdentification of the control framework

DOutput from the enterprise's risk management system

Show Answer

Isaca CISA Quiz:428 Topic:8 Questions:2136-2140