QUESTION: 101

An IS auditor finds that a key Internet-facing system is vulnerable to attack and that patches are not available. What should the auditor recommend be done
FIRST?

Implement additional firewalls to protect the system.
Decommission the server.
Implement a new system that can be patched.
Evaluate the associated risk.

Answer(s): D

Reveal Solution Next Question

During a review of an organization's network threat response process, the IS auditor noticed that the majority of alerts were closed without resolution.
Management responded that those alerts were unworkable due to lack of actionable intelligence, and therefore the support team is allowed to close them. What is the BEST way for the auditor to address this situation?

Further review closed unactioned alerts to identify mishandling of threats.
Reopen unactioned alerts and report to the audit committee.
Recommend that management enhance the policy and improve threat awareness training.
Omit the finding from the report as this practice is in compliance with the current policy.

Answer(s): A

Reveal Solution Next Question

QUESTION: 103

Which of the following BEST helps to ensure data integrity across system interfaces?

Reconciliations
Environment segregation
Access controls
System backups

Answer(s): A

Reveal Solution Next Question

QUESTION: 104

Due to system limitations, segregation of duties (SoD) cannot be enforced in an accounts payable system. Which of the following is the IS auditor's BEST recommendation for a compensating control?

Require written authorization for all payment transactions.
Review payment transaction history.
Reconcile payment transactions with invoices.
Restrict payment authorization to senior staff members.

Answer(s): A

Reveal Solution Next Question

Free CISA Exam Braindumps (page: 27)

QUESTION: 101

QUESTION: 102

QUESTION: 103

QUESTION: 104

CISA Exam Discussions & Posts