SPOTO CISA Exam Dumps updates! SPOTO has accurate solutions and a 100% Pass rate guarantee! you can download free exam demos to test yourself!
Top 8 Benefits of Choosing CISA Exam Dumps!
• 100% Real Exam Answers and Questions
• 100% Pass Guarantee
• Real Simulated Exam Environment
• Free Update for Dump Stability
• SPOTO Dumps with Highest Accuracy
• Latest Passing Report Feedback
• 7/24 Technical Support
• Professional Tutors Teams
Get 100% Real SPOTO CISA Exam Practice Tests!
1.What is the MOST difficult aspect of access control in a multiplatform, multiple-site client/server environment?
A.Restricting a local user to necessary resources on a local platform
B.Restricting a local user to necessary resources on the host server
C.Maintaining consistency throughout all platforms
D.Creating new user IDs are valid only on a few hosts.
Answer: C
2.Which of the following sampling methods is the BEST approach for drawing conclusions based on the frequency of occurrence?
A.Attribute sampling
B.Monetary estimation sampling
C.Stratified sampling
D.Difference estimation sampling
Answer: A
3.What is the purpose of using a write blocker during the acquisition phase of a digital forensics investigation?
A.To preserve chain of custody.
B.To protect against self-destruct utilities.
C.To prevent the activation of installed malware.
D.To prevent evidence alteration.
Answer: A
4.When using a wireless device, which of the following BEST ensures confidential access to email via webmail?
A.Simple object access protocol (SOAP)
B.Hypertext transfer protocol secure (HTTPS)
C.Extensible markup language (XML)
D.Wired equivalent privacy (WEP)
Answer: D
5.The PRIMARY purpose of an internal audit department’s quality assurance improvement program is to evaluate which of the following?
A.The adequacy and qualifications of internal audit personnel
B.The effectiveness of the internal audit function
C.The efficiency of internal audit processes
D.The accuracy of prior-year internal audit results
Answer: B
6.Which of the following is an indication of possible hacker activity involving voice communications?
A.A significant percentage of lines are busy during early morning and late afternoon hours.
B.Outbound calls are found to significantly increase in frequency during non-business hours.
C.Inbound calls experience significant fluctuations based on time-of-day and day-of-week.
D.Direct inward system access (DISA) is found to be disabled on the company’s exchange.
Answer: B
7.Which of the following is the BEST recommendation for the establishment of an information security policy?
A.The policy should be developed by IS management.
B.The development and approval should be overseen by business area management.
C.The policy and guidelines should be developed by the human resources department.
D.The policy should be developed by the security administrator.
Answer: B
8.The final acceptance testing of a new application system should be the responsibility of the:
A.quality assurance team.
B.IS management.
C.user group.
D.IS audit team.
Answer: C
9.Which of the following presents the GREATEST security risk in a virtualized computing environment?
A.Passwords for the software that controls the operations of virtual machines are set to default.
B.Backups for sensitive data formats are not stored at an offsite location.
C.Some business users have not received appropriate training on the virtual desktop environment.
D.Physical access to the data center that hosts hardware for virtual machines is not logged.
Answer: A
10.A PRIMARY benefit derived by an organization employing control self-assessment (CSA) techniques is that CSA:
A.can identify high-risk areas for detailed review.
B.allows IS auditors to independently assess risk.
C.can be used as a replacement for traditional audits.
D.allows management to relinquish responsibility for control.
Answer: A
11.An organization with high-security requirements is evaluating the effectiveness of biometric systems. Which of the following performance indicators is MOST important?
A.False-identification rate (FIR).
B.Equal-error rate (EER).
C.False-rejection rate (FRR).
D.False-acceptance rate (FAR).
Answer: D
12.Which of the following is the GREATEST advantage of implementing an IT enterprise architecture framework within an organization?
A.It better equips an organization to adopt innovative and emerging technologies.
B.It helps to identify security issues in systems across the organization.
C.It reduces the overlap of infrastructure technologies within the organization.
D.It improves the organization’s ability to meet service level agreements (SLAs).
Answer: D
13.Which of the following is the BEST way to increase the effectiveness of security incident detection?
A.Educating end-users on identifying suspicious activity.
B.Determining containment activities based on the type of incident.
C.Establishing service level agreements (SLAs) with appropriate forensic service providers.
D.Documenting root causes analysis procedures.
Answer: A
14.What is the FIRST step an auditor should take when beginning a follow-up audit?
A.Review workpapers from the previous audit.
B.Gather evidence of remediation to conduct tests of controls.
C.Review previous findings and action plans.
D.Meet with the auditee to discuss remediation progress.
Answer: C
15.During the implementation of an upgraded enterprise resource planning (ERP) system, which of the following is the MOST important consideration for a go-live decision?
A.Test cases
B.Rollback strategy
C.Business case
D.Post-implementation review objectives
Answer: B
Comments