Isaca CISA Quiz 156 Topic 9 Questions 776-780

Question: 1

An investment advisor e-mails periodic newsletters to clients and wants reasonable assurance that no one has modified the newsletter. This objective can be achieved by:

Aencrypting the hash of the newsletter using the advisor's private key.

Bencrypting the hash of the newsletter using the advisor's public key.

Cdigitally signing the document using the advisor's private key.

Dencrypting the newsletter using the advisor's private key.

Show Answer

Question: 2

An IS auditor reviewing wireless network security determines that the Dynamic Host Configuration Protocol is disabled at all wireless access points. This practice:

Areduces the risk of unauthorized access to the network.

Bis not suitable for small networks.

Cautomatically provides an IP address to anyone.

Dincreases the risks associated with Wireless Encryption Protocol (WEP).

Show Answer

Question: 3

A virtual private network (VPN) provides data confidentiality by using:

ASecure Sockets Layer (SSL)

BTunnelling

CDigital signatures

DPhishing

Show Answer

Question: 4

In auditing a web server, an IS auditor should be concerned about the risk of individuals gaining unauthorized access to confidential information through:

Acommon gateway interface (CGI) scripts.

Benterprise Java beans (EJBs).

Capplets.

Dweb services.

Show Answer

Question: 5

An IS auditor reviewing access controls for a client-server environment should FIRST:

Aevaluate the encryption technique.

Bidentify the network access points.

Creview the identity management system.

Dreview the application level access controls.

Show Answer

Isaca CISA Quiz:156 Topic:9 Questions:776-780