Isaca CISA Quiz 150 Topic 9 Questions 746-750

Question: 1

The FIRST step in a successful attack to a system would be:

Agathering information.

Bgaining access.

Cdenying services.

Devading detection.

Show Answer

Question: 2

The sender of a public key would be authenticated by a:

Acertificate authority,

Bdigital signature.

Cdigital certificate.

Dregistration authority.

Show Answer

Question: 3

An IS auditor finds that conference rooms have active network ports. Which of the following is MOST important to ensure?

AThe corporate network is using an intrusion prevention system (IPS)

BThis part of the network is isolated from the corporate network

CA single sign-on has been implemented in the corporate network

DAntivirus software is in place to protect the corporate network

Show Answer

Question: 4

What is the BEST action to prevent loss of data integrity or confidentiality in the case of an e-commerce application running on a LAN, processing electronic fund transfers (EFT) and orders?

AUsing virtual private network (VPN) tunnels for data transfer

BEnabling data encryption within the application

CAuditing the access control to the network

DLogging all changes to access lists

Show Answer

Question: 5

When conducting a penetration test of an IT system, an organization should be MOST concerned with:

Athe confidentiality of the report.

Bfinding all possible weaknesses on the system.

Crestoring all systems to the original state.

Dlogging all changes made to the production system.

Show Answer

Isaca CISA Quiz:150 Topic:9 Questions:746-750