Isaca CISA Quiz 189 Topic 8 Questions 941-945

Question: 1

Which of the following functions should be performed by the application owners to ensure an adequate segregation of duties between IS and end users?

ASystem analysis

BAuthorization of access to data

CApplication programming

DData administration

Show Answer

Question: 2

Accountability for the maintenance of appropriate security measures over information assets resides with the:

Asecurity administrator.

Bsystems administrator.

Cdata and systems owners.

Dsystems operations group.

Show Answer

Question: 3

The GREATEST risk when end users have access to a database at its system level, instead of through the application, is that the users can:

Amake unauthorized changes to the database directly, without an audit trail.

Bmake use of a system query language (SQL) to access information.

Cremotely access the database.

Dupdate data without authentication.

Show Answer

Question: 4

To determine who has been given permission to use a particular system resource, an IS auditor should review:

Aactivity lists.

Baccess control lists.

Clogon ID lists.

Dpassword lists.

Show Answer

Question: 5

Which of the following is the MOST effective control when granting temporary access to vendors?

AVendor access corresponds to the service level agreement (SLA).

BUser accounts are created with expiration dates and are based on services provided.

CAdministrator access is provided for a limited period.

DUser IDs are deleted when the work is completed.

Show Answer

Isaca CISA Quiz:189 Topic:8 Questions:941-945