Isaca CISA Quiz 171 Topic 8 Questions 851-855

Question: 1

A TCP/IP-based environment is exposed to the Internet. Which of the following BEST ensures that complete encryption and authentication protocols exist for protecting information while transmitted?

AWork is completed in tunnel mode with IP security using the nested services of authentication header (AH) and encapsulating security payload (ESP).

BA digital signature with RSA has been implemented.

CDigital certificates with RSA are being used.

DWork is being completed in TCP services.

Show Answer

Question: 2

Digital signatures require the:

Asigner to have a public key and the receiver to have a private key.

Bsigner to have a private key and the receiver to have a public key.

Csigner and receiver to have a public key.

Dsigner and receiver to have a private key.

Show Answer

Question: 3

The feature of a digital signature that ensures the sender cannot later deny generating and sending the message is called:

Adata integrity.

Bauthentication.

Cnon repudiation.

Dreplay protection.

Show Answer

Question: 4

An IS auditor doing penetration testing during an audit of internet connections would:

Aevaluate configurations.

Bexamine security settings.

Censure virus-scanning software is in use.

Duse tools and techniques available to a hacker.

Show Answer

Question: 5

Which of the following should concern an IS auditor when reviewing security in a client-server environment?

AProtecting data using an encryption technique

BPreventing unauthorized access using a diskless workstation

CThe ability of users to access and modify the database directly

DDisabling floppy drives on the users' machines

Show Answer

Isaca CISA Quiz:171 Topic:8 Questions:851-855