Isaca CISA Quiz 608 Topic 9 Questions 3036-3040

Question: 1

Which of the following should an IS auditor do FIRST when assessing the level of compliance for an organization in the banking industry?

AReview internal documentation to evaluate adherence to external requirements.

BDetermine whether the organization has established benchmarks against industry peers for compliance.

CConfirm there are procedures in place to ensure organizational agreements address legal requirements.

DIdentify industry-specific requirements that apply to the organization.

Show Answer

Question: 2

Demonstrated support from which of the following roles in an organization has the MOST influence over information security governance?

ABoard of directors

BChief information officer (CID)

CInformation security steering committee

DChief information security officer (CISO)

Show Answer

Question: 3

An organization recently switched vendors to perform hardware service and maintenance. The new contract specifies a longer response time than the organization's requirement's. Which of the following is the GREATEST risk of this change?

ADisaster recovery plans (DRPs) may have increased dependence on the new vendor.

BThere may be an increase of shadow IT occurrences.

CUnexpected downtime may impact key business processes.

DBusiness data may be lost in the event of system failure.

Show Answer

Question: 4

Which of the following is the PRIMARY reason to adopt a capability model?

ATo increase the organization's level of security

BTo guide improvement of organizational processes

CTo decrease the organization's level of risk

DTo ensure compliance with laws and regulation

Show Answer

Question: 5

Which of the following would a digital signature MOST likely prevent?

ACorruption

BUnauthorized change

CRepudiation

DDisclosure
Digital signature enforces non-repudiation. Thereby it prevents repudiation.

Show Answer

Isaca CISA Quiz:608 Topic:9 Questions:3036-3040