An IS auditor is reviewing a recent security incident and is seeking information about the approval of a recent modification to a database system's security settings. Where would the auditor MOST likely find this information?
Answer(s): B
A review of an organization's IT portfolio revealed several applications that are not in use. The BEST way to prevent this situation from recurring would be to implement:
Answer(s): D
In an environment that automatically reports all program changes, which of the following is the MOST efficient way to detect unauthorized changes to production programs?
Answer(s): C
An IS auditor is observing transaction processing and notes that a high-priority update job ran out of sequence. What is the MOST significant risk from this observation?
Which of the following is the BEST source of information for an IS auditor to use when determining whether an organization's information security policy is adequate?
Answer(s): A
Post your Comments and Discuss ISACA CISA exam prep with other Community members: