Isaca CISA Quiz 180 Topic 8 Questions 896-900

Question: 1

Inadequate programming and coding practices introduce the risk of:

Aphishing.

Bbuffer overflow exploitation.

CSYN flood.

Dbrute force attacks.

Show Answer

Question: 2

Which of the following would prevent unauthorized changes to information stored in a server's log?

AWrite-protecting the directory containing the system log

BWriting a duplicate log to another server

CDaily printing of the system log

DStoring the system log in write-once media

Show Answer

Question: 3

After reviewing its business processes, a large organization is deploying a new web application based on a VoIP technology. Which of the following is the MOST appropriate approach for implementing access control that will facilitate security management of the VoIP web application?

AFine-grained access control

BRole-based access control (RBAC)

CAccess control lists

DNetwork/service access control

Show Answer

Question: 4

In an online banking application, which of the following would BEST protect against identity theft?

AEncryption of personal password

BRestricting the user to a specific terminal

CTwo-factor authentication

DPeriodic review of access logs

Show Answer

Question: 5

Which of the following is the BEST method for preventing the leakage of confidential information in a laptop computer?

AEncrypt the hard disk with the owner's public key.

BEnable the boot password (hardware-based password).

CUse a biometric authentication device.

DUse two-factor authentication to logon to the notebook.

Show Answer

Isaca CISA Quiz:180 Topic:8 Questions:896-900