Isaca CISA Quiz 166 Topic 8 Questions 826-830

Question: 1

Which of the following would an IS auditor consider a weakness when performing an audit of an organization that uses a public key infrastructure with digital certificates for its business-toconsumer transactions via the internet?

ACustomers are widely dispersed geographically, but the certificate authorities are not.

BCustomers can make their transactions from any computer or mobile device.

CThe certificate authority has several data processingsubcenters to administer certificates.

DThe organization is the owner of the certificate authority.

Show Answer

Question: 2

Which of the following implementation modes would provide the GREATEST amount of security for outbound data connecting to the internet?

ATransport mode with authentication header (AH) plus encapsulating security payload (ESP)

BSecure Sockets Layer (SSL) mode

CTunnel mode with AH plus ESP

DTriple-DES encryption mode

Show Answer

Question: 3

Which of the following is the MOST reliable sender authentication method?

ADigital signatures

BAsymmetric cryptography

CDigital certificates

DMessage authentication code

Show Answer

Question: 4

Which of the following provides the GREATEST assurance of message authenticity?

ATheprehash code is derived mathematically from the message being sent.

BTheprehash code is encrypted using the sender's private key.

CTheprehash code and the message are encrypted using the secret key.

DThe sender attains the recipient's public key and verifies the authenticity of its digital certificate with a certificate authority.

Show Answer

Question: 5

Which of the following internet security threats could compromise integrity?

ATheft of data from the client

BExposure of network configuration information

CA Trojan horse browser

DEavesdropping on the net

Show Answer

Isaca CISA Quiz:166 Topic:8 Questions:826-830