Isaca CISA Quiz 254 Topic 9 Questions 1266-1270

Question: 1

Which of the following controls would an IS auditor look for in an environment where duties cannot be appropriately segregated?

AOverlapping controls

BBoundary controls

CAccess controls

DCompensating controls

Show Answer

Question: 2

Which of the following reduces the potential impact of social engineering attacks?

ACompliance with regulatory requirements

BPromoting ethical understanding

CSecurity awareness programs

DEffective performance incentives

Show Answer

Question: 3

Which of the following activities performed by a database administrator (DBA) should be performed by a different person?

ADeleting database activity logs

BImplementing database optimization tools

CMonitoring database usage

DDefining backup and recovery procedures

Show Answer

Question: 4

To gain an understanding of the effectiveness of an organization's planning and management of investments in IT assets, an IS auditor should review the:

Aenterprise data model.

BIT balanced scorecard (BSC).

CIT organizational structure.

Dhistorical financial statements.

Show Answer

Question: 5

Which of the following is the BEST performance criterion for evaluating the adequacy of an organization's security awareness training?

ASenior management is aware of critical information assets and demonstrates an adequate concern for their protection.

BJob descriptions contain clear statements of accountability for information security.

CIn accordance with the degree of risk and business impact, there is adequate funding for security efforts.

DNo actual incidents have occurred that have caused a loss or a public embarrassment.

Show Answer

Isaca CISA Quiz:254 Topic:9 Questions:1266-1270