Isaca CISA Quiz 593 Topic 9 Questions 2961-2965

Question: 1

Which of the following would provide the BEST evidence of the effectiveness of mandated annual security awareness training?

ANumber of security incidents

BTrending of social engineering test results

CSurveys completed by randomly selected employees

DResults of a third-party penetration test

Show Answer

Question: 2

When preparing to evaluate the effectiveness of an organizations IT strategy, an IS auditor should FIRST review:

Athe IT governance framework.

Bthe IT processes and procedures.

CInformation security procedures.

Dthe most recent audit results.

Show Answer

Question: 3

Which of the following poses the GREATEST security risk when implementing acquired application systems?

ADefault logon IDs

BSocial engineering

CLack of audit logs

DPassword length

Show Answer

Question: 4

The MOST important reason why an IT risk assessment should be updated on a regular basis is to:

Acomply with risk management policies

Bcomply with data classification changes.

Creact to changes in the IT environment.

Dutilize IT resources in a cost-effective manner.

Show Answer

Question: 5

Which of the following findings should be of GREATEST concern to an IS auditor reviewing system deployment tools for a critical enterprise application system?

AChange requests do not contain backout plans.

BThere are no documented instructions for using the tool.

CAccess to the tool is not approved by senior management.

DAccess to the tool is not restricted.

Show Answer

Isaca CISA Quiz:593 Topic:9 Questions:2961-2965