Isaca CISA Quiz 45 Topic 8 Questions 221-225

Question: 1

In the case of a disaster where the data center is no longer available which of the following tasks should be done FIRST?

APerform data recovery

BActivate the call tree

CAnalyze risk

DArrange for a secondary site

Show Answer

Question: 2

During the planning stage of a compliance audit an IS auditor discovers that a bank's Inventory of compliance requirements does not include recent regulatory changes related to managing data risk. What should the auditor do FIRST?

AExclude recent regulatory changes from the audit scope

BDiscuss potential regulatory issues with the legal department.

CReport the missing regulatory updates to the chief information officer (CIO)

DAsk management why the regulatory changes have not been included

Show Answer

Question: 3

An IS auditor notes that application super-user activity was not recorded in system logs. What is the auditor's BEST course of action?

AInvestigate the reason for the lack of logging

BRecommend a least privilege access model

CRecommend activation of super user activity logging

DReport the issue to the audit manager

Show Answer

Question: 4

An organization uses multiple offsite data center facilities Which of the following is MOST important to consider when choosing related backup devices and media?

AStandardization

BBackup media capacity

CRestoration speed

DAssociated costs

Show Answer

Question: 5

An organization considers implementing a system that uses a technology that is not in line with the organization's IT strategy. Which of the following is the BEST justification for deviating from the IT strategy?

AThe system makes use of state-of-the-art technology

BThe organization has staff familiar with the technology

CThe system has a reduced cost of ownership

DThe business benefits are achieved even with extra costs

Show Answer

Isaca CISA Quiz:45 Topic:8 Questions:221-225