Free CISA Exam Braindumps (page: 22)

Page 22 of 457

Which of the following activities provides an IS auditor with the MOST insight regarding potential single person dependencies that might exist within the organization?

  1. Reviewing vacation patterns
  2. Interviewing senior IT management
  3. Mapping IT processes to roles
  4. Reviewing user activity logs

Answer(s): C



Which of the following metrics is the BEST indicator of the performance of a web application?

  1. Server thread count
  2. Server uptime
  3. HTTP server error rate
  4. Average response time

Answer(s): D



An IS auditor suspects an organization's computer may have been used to commit a crime. Which of the following is the auditor's BEST course of action?

  1. Contact the incident response team to conduct an investigation.
  2. Advise management of the crime after the investigation.
  3. Examine the computer to search for evidence supporting the suspicions.
  4. Notify local law enforcement of the potential crime before further investigation.

Answer(s): A



An IS auditor follows up on a recent security incident and finds the incident response was not adequate. Which of the following findings should be considered
MOST critical?

  1. The attack could not be traced back to the originating person.
  2. The attack was not automatically blocked by the intrusion detection system (IDS).
  3. Appropriate response documentation was not maintained.
  4. The security weakness facilitating the attack was not identified.

Answer(s): D






Post your Comments and Discuss ISACA CISA exam with other Community members:

CISA Exam Discussions & Posts