Free CISA Exam braindumps download (CISA exam dumps Free)

QUESTION: 646

Which of the following is MOST important for an IS auditor to verify when reviewing the use of an outsourcer for disposal of storage media?

The contract includes issuance of a certificate of destruction by the vendor.
The vendor's process appropriately sanitizes the media before disposal.
The vendor has not experienced security incidents in the past.
The disposal transportation vehicle is fully secure.

Answer(s): B

Show Answer Next Question

QUESTION: 647

Which of the following is a detective control?

Verification of hash totals
Programmed edit checks for data entry
Use of pass cards to gain access to physical facilities
Backup procedures

Answer(s): A

Show Answer Next Question

QUESTION: 648

Which of the following is the BEST way for an organization to mitigate the risk associated with third-party application performance?

Use analytics within the internal audit function.
Ensure the third party allocates adequate resources to meet requirements.
Conduct a capacity planning exercise.
Utilize performance monitoring tools to verify service level agreements (SLAs).

Answer(s): D

Show Answer Next Question

An organization conducted an exercise to test the security awareness level of users by sending an email offering a cash reward to those who click on a link embedded in the body of the email. Which of the following metrics BEST indicates the effectiveness of awareness training?

The number of users forwarding the email to their business unit managers
The number of users clicking on the link to learn more about the sender of the email
The number of users reporting receipt of the email to the information security team
The number of users deleting the email without reporting because it is a phishing email

Answer(s): C

Show Answer Next Question

QUESTION: 650

A review of Internet security disclosed that users have individual user accounts with Internet service providers (ISPs) and use these accounts for downloading business data. The organization wants to ensure that only the corporate network is used. The organization should FIRST:

use a proxy server to filter out Internet sites that should not be accessed.
keep a manual log of Internet access.
include a statement in its security policy about Internet use.
monitor remote access activities.

Answer(s): A

Show Answer Next Question

Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 646–650 (page: 131)

QUESTION: 646

QUESTION: 647

QUESTION: 648

QUESTION: 649

QUESTION: 650

Free CISA Exam Braindumps Certified Information Systems Auditor Questions 646–650 (page: 131)

QUESTION: 646

QUESTION: 647

QUESTION: 648

QUESTION: 649

QUESTION: 650

Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 646–650 (page: 131)