Isaca CISA Quiz 195 Topic 9 Questions 971-975

Question: 1

Assuming this diagram represents an internal facility and the organization is implementing a firewall protection program, where should firewalls be installed?

ANo firewalls are needed

BOp-3 location only

CMIS (Global) and NAT2

DSMTP Gateway and op-3

Show Answer

Question: 2

For locations 3a, 1d and 3d, the diagram indicates hubs with lines that appear to be open and active. Assuming that is true, what control, if any, should be recommended to mitigate this weakness?

AIntelligent hub

BPhysical security over the hubs

CPhysical security and an intelligent hub

DNo controls are necessary since this is not a weakness

Show Answer

Question: 3

In the 2c area of the diagram, there are three hubs connected to each other. What potential risk might this indicate?

AVirus attack

BPerformance degradation

CPoor management controls

DVulnerability to external hackers

Show Answer

Question: 4

An organization provides information to its supply chain partners and customers through an extranet infrastructure. Which of the following should be the GREATEST concern to an IS auditor reviewing the firewall security architecture?

AA Secure Sockets Layer (SSL) has been implemented for user authentication and remote
administration of the firewall.

BFirewall policies are updated on the basis of changing requirements.

Cinbound traffic is blocked unless the traffic type and connections have been specifically permitted.

DThe firewall is placed on top of the commercial operating system with all installation options.

Show Answer

Question: 5

In a client-server architecture, a domain name service (DNS) is MOST important because it provides the:

Aaddress of the domain server.

Bresolution service for the name/address.

CIP addresses for the internet.

Ddomain name system.

Show Answer

Isaca CISA Quiz:195 Topic:9 Questions:971-975