Isaca CISA Quiz 34 Topic 9 Questions 166-170

Question: 1

Which of the following would be of GREATEST concern to an IS auditor reviewing backup and recovery controls?

ABackups are stored in an external hard drive

BRestores from backups are not periodically tested

CBackup procedures are not documented

DWeekly and monthly backups are stored onsite

Show Answer

Question: 2

Which of the following is MOST important when creating a forensic image of a hard drive?

ARequiring an independent third-party be present while imaging

BChoosing an industry-leading forensics software tool

CSecuring a backup copy of the hard drive

DGenerating a content hash of the hard drive

Show Answer

Question: 3

Which of the following is the MOST important consideration for an IS auditor when assessing the adequacy of an organizations information security policy?

ABusiness objectives

BAlignment with the IT tactical plan

CCompliance with industry best practice

DIT steering committee minutes

Show Answer

Question: 4

Which of the following provides the MOST comprehensive description of IT's role in an organization?

AIT job description

BIT organizational chart

CIT charter

DIT project portfolio

Show Answer

Question: 5

During an IT operations audit multiple unencrypted backup tapes containing sensitive credit card information cannot be found Which of the following presents the GREATEST risk to the organization?

AReputational damage due to potential identity theft

BBusiness disruption if a data restore cannot be completed

CThe cost of recreating the missing backup tapes

DHuman resource cost of responding to the incident

Show Answer

Isaca CISA Quiz:34 Topic:9 Questions:166-170