Isaca CISA Quiz 451 Topic 9 Questions 2251-2255

Question: 1

Performance monitoring tools report that servers are consistently above the recommended utilization capacity. Which of the following is the BEST recommendation of the IS auditor?

AAdd servers until utilization is at target capacity

BMonitor activity logs

CDeploy load balancers

DDevelop a capacity plan based on usage projections

Show Answer

Question: 2

Which of the following is the MOST significant concerns when backup tapes are encrypted?

ALoss of encryption keys

BInaccurate data due to encryption processing

CIncompatibility with future software versions

DLack of physical security over the tapes

Show Answer

Question: 3

An organization globally distributes a free phone application that includes a module to gather and report user information. The application includes a privacy notice altering users to the data gathering. Which of the following presents the GREATEST risk?

AThere is no framework to delete personal data

BThe data is not properly encrypted on the application server

CThere may be a backlash among users when the data gathering is revealed

DThe data gathering notice is available in only one language

Show Answer

Question: 4

An organization is considering outsourcing the processing of customer insurance claims. An IS auditor notes that customer data will be sent offshore for processing. Which of the following would be the BEST way to address the risk of exposing customer data?

ARequire background checks on service provider personnel involved in the processing of data.

BRecommend the use of a service provide within the same country as the organization

CConsider whether the service provider has the ability to meet service level agreements (SLA)

DAssess whether the service provider meets the organization's data protection polices

Show Answer

Question: 5

What is the MOST important role of a certificate authority (CA) when a private key becomes compromised?

ARefresh the metadata of the certificates

BRefresh the key information database is the certificate publishing server

CPublish the certificate revocation lists (CRL) into the repository

DIssue a new private key to the user

Show Answer

Isaca CISA Quiz:451 Topic:9 Questions:2251-2255