Which of the following security controls might prevent unauthorized access to sensitive data via an unattended workstation directly connected to a mainframe?
Answer(s): D
Automatic log-off of inactive users is a utility that disconnects a workstation from the mainframe or server after a certain amount of time. Once the workstation has been disconnected, the user must log back into the system.
Which of the following is an objective of logical security controls for information systems?
Answer(s): C
The primary objective of security controls for information systems is to restrict access to data and resources both hardware and software) to only authorized individuals.
Which of the following is the most effective user account management control in preventing the unauthorized use of a computer system?
Management's network security policy should include measures to ensure that old and] unused accounts are removed promptly. If employees' accounts expire semiannually, reasonable assurance is provided that accounts in use by unauthorized employees do not exist.
Assigning passwords to computer users is a control to prevent unauthorized access. Because a password does not conclusively identify a specific individual, it must be safeguarded from theft. A method used to protect passwords is to
Security measures include changing passwords frequently, that is. establishing a relatively short maximum retention period; not displaying or printing passwords; setting minimum lengths;prohibiting the use of certain words, character strings, or names, mandating a minimum retention period so users cannot promptly change passwords back to their old and convenient values; and retaining old passwords to prevent their use.
The best source of evidence to determine if ex-employees continue to have access to a company's computer systems is:
To determine if ex-employees are accessing the company's computer systems, the auditor should obtain the log showing system access. This log should be compared with current payroll lists to see if anyone not on the payroll is still accessing or is able to access the systems.
Post your Comments and Discuss IIA IIA-CIA-PART3-3P exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the IIA-CIA-PART3-3P content, but please register or login to continue.