Isaca CISA Quiz 419 Topic 9 Questions 2091-2095

Question: 1

Which of the following is the PRIMARY purpose of documenting and approving an information security policy?

ATo mitigate the organization's information security risk to an acceptable level

BTo communicate management's intent for securing the organization's information assets

CTo determine the best approach for implementing information security within the organization

DTo ensure awareness of disciplinary procedures for security breaches by authorized users

Show Answer

Question: 2

Which of the following is the PRIMARY advantage of the IT portfolio management approach over the balanced scorecard approach when managing IT investments?

AIncorporation of organizational strategy in investment decisions

BThe influence of qualitative factors on investment decisions

CUse of the organization's risk appetite in investment decisions

DAgility in adjusting investment decisions

Show Answer

Question: 3

Which of the following is MOST important to include in a business continuity plan (BCP)?

ADocumentation of critical systems

BDocumentation of data center floor plans

CVendor contact information

DBackup site location information

Show Answer

Question: 4

Loading of illegal software packages onto a network by an employee is MOST effectively detected by:

Amaintaining current antivirus software

Blogging of activity on network drives

Cdiskless workstations

Dregular scanning of hard drives

Show Answer

Question: 5

Which of the following BEST determines if a batch update job was completed?

AReviewing the job log

BObtaining process owner confirmation

CTesting a sample of transactions

DReviewing a copy of the script

Show Answer

Isaca CISA Quiz:419 Topic:9 Questions:2091-2095