Isaca CISA Quiz 458 Topic 8 Questions 2286-2290

Question: 1

The BEST way to evaluate a shared control environment is to obtain an assurance report and review which of the following?

AMaster Service agreement

BService level agreement

CControl self-assessment

DComplementary user entity controls

Show Answer

Question: 2

Privileged account access is require to start an ad hoc batch job. Which of the following would MOST effectively detect unauthorized job execution?

AIntroducing job execution request procedures

BExecuting the job through two-factor authentication

CRequiring manual approval by an authorized users

DReconciling user activity logs against authorization

Show Answer

Question: 3

Which of the following is the MOST critical step prior to performing a network penetration test?

AInforming management of the potential risk involved with penetration testing

BIdentifying a scanning tool for use in identifying vulnerabilities

CCommunicating the location of the penetration test targets to management

DReviewing the result of previous penetration tests.

Show Answer

Question: 4

An organization allows employees to use personally owned mobile devices to access customer's personal information. An IS auditor's GREATEST concern should be whether

AMobile devices are compatible with company infrastructure

BMobile device security policies have been implemented

CDevices have adequate storage and backup capabilities

DDevices have the capability to segregate business and personal data.

Show Answer

Question: 5

Which of the following methodologies is MOST appropriate to use for developing software with incomplete requirements?

AAgile

BWaterfall

CCritical chain

DProcess-based

Show Answer

Isaca CISA Quiz:458 Topic:8 Questions:2286-2290