Isaca CISA Quiz 445 Topic 8 Questions 2221-2225

Question: 1

Which of the following findings should be of MOST concern to an IS auditor when evaluating information security governance within an organization?

AThe information security department has difficulty filling vacancies

BThe data center manager has final sign-off on security projects

CInformation security policies were last updated two years ago

DThe information security oversight committee meets quarterly

Show Answer

Question: 2

Which of the following should an IS auditor be MOST concerned with when a system uses ratio frequency identification (RFID)?

AScalability

BMaintainability

CPrivacy

Dnonrepudiations

Show Answer

Question: 3

What would be an IS auditors GREATEST concern when using a test environment for an application audit?

ATest and production environments do not mirror each other

BDevelopers have access to the best environment

CTest and production environments lack data encryptions

DRetention period of test data has been exceeded

Show Answer

Question: 4

As part of business continuity planning. Which of the following is MOST important to include in a business impact analyst (BIA)?

ADefine a risk appetite.

BAssess risk of moving significant applications to the cloud

CAssess recovery scenarios

DAssess threats to the organization

Show Answer

Question: 5

Which of the following is MOST important to the effective management of an end user developed application?

AImplementing best practice folder structures

BAssigning risk ratings based on probability and impact

CStress testing the application through use of data outliers

DContinuous monitoring to facilitate prompt escalation of issues

Show Answer

Isaca CISA Quiz:445 Topic:8 Questions:2221-2225