QUESTION: 37

An organization recently implemented a cloud document storage solution and removed the ability for end users to save data to their local workstation hard drives.
Which of the following findings should be the IS auditor's GREATEST concern?

Mobile devices are not encrypted.
Users are not required to sign updated acceptable use agreements.
The business continuity plan (BCP) was not updated.
Users have not been trained on the new system.

Answer(s): A

Reveal Solution Next Question

QUESTION: 38

Which of the following security measures will reduce the risk of propagation when a cyberattack occurs?

Data loss prevention (DLP) system
Perimeter firewall
Network segmentation O Web application firewall

Answer(s): C

Reveal Solution Next Question

QUESTION: 39

An IS auditor notes that the previous year's disaster recovery test was not completed within the scheduled time frame due to insufficient hardware allocated by a third-party vendor. Which of the following provides the BEST evidence that adequate resources are now allocated to successfully recover the systems?

Hardware change management policy
An up-to-date RACI chart
Vendor memo indicating problem correction
Service level agreement (SLA)

Answer(s): D

Reveal Solution Next Question

QUESTION: 40

When implementing Internet Protocol security (IPsec) architecture, the servers involved in application delivery:

channel access only through the public-facing firewall.
channel access through authentication.
communicate via Transport Layer Security (TLS).
block authorized users from unauthorized activities.

Answer(s): B

Reveal Solution Next Question

Free CISA Exam Braindumps (page: 11)

QUESTION: 37

QUESTION: 38

QUESTION: 39

QUESTION: 40

CISA Exam Discussions & Posts