QUESTION: 153

Which of the following is the BEST control to mitigate the malware risk associated with an instant messaging (IM) system?

Blocking external IM traffic
Blocking attachments in IM
Allowing only corporate IM solutions
Encrypting IM traffic

Answer(s): C

Reveal Solution Next Question

An IS auditor noted that a change to a critical calculation was placed into the production environment without being tested. Which of the following is the BEST way to obtain assurance that the calculation functions correctly?

Check regular execution of the calculation batch job.
Interview the lead system developer.
Obtain post-change approval from management.
Perform substantive testing using computer-assisted audit techniques (CAATs).

Answer(s): D

Reveal Solution Next Question

QUESTION: 155

The use of cookies constitutes the MOST significant security threat when they are used for:

obtaining a public key from a certification authority (CA).
forwarding email and Internet Protocol (IP) addresses.
authenticating using username and password.
downloading files from the host server.

Answer(s): C

Reveal Solution Next Question

QUESTION: 156

To address issues related to privileged users identified in an IS audit, management implemented a security information and event management (SIEM) system.
Which type of control is in place?

Directive
Detective
Preventive
Corrective

Answer(s): B

Reveal Solution Next Question

Free CISA Exam Braindumps (page: 40)

QUESTION: 153

QUESTION: 154

QUESTION: 155

QUESTION: 156

CISA Exam Discussions & Posts