QUESTION: 177

An organization shares some of its customers' personally identifiable information (PII) with third-party suppliers for business purposes. What is MOST important for the IS auditor to evaluate to ensure that risk associated with leakage of privacy-related data during transmission is effectively managed?

Encrypting and masking of customer data
The third party's privacy and data security policies
Nondisclosure and indemnity agreements
Service and operational level agreements

Answer(s): A

Show Answer Next Question

QUESTION: 178

Following an internal audit of a database, management has committed to enhance password management controls. Which of the following provides the BEST evidence that management has remediated the audit finding?

Screenshots from end users showing updated password settings
Interviews with management about remediation completion
Change tickets of recent password configuration updates
Observation of updated password settings with database administrators (DBAs)

Answer(s): C

Show Answer Next Question

QUESTION: 179

Reviewing project plans and status reports throughout the development life cycle will:

eliminate the need to perform a risk assessment.
postpone documenting the project's progress until the final phase.
guarantee that the project will meet its intended deliverables.
facilitate the optimal use of resources over the life of the project.

Answer(s): D

Show Answer Next Question

QUESTION: 180

An organization is experiencing a large number of phishing attacks targeting employees and executives following a press release announcing an acquisition.
Which of the following would provide the BEST defense against these attacks?

Conduct organization-wide awareness training.
Deploy intrusion detection and prevention systems.
Install spam filters on the acquired systems.
Require signed acknowledgment of the organization's security policy.

Answer(s): A

Show Answer Next Question

Free ISACA CISA Exam Braindumps (page: 46)

QUESTION: 177

QUESTION: 178

QUESTION: 179

QUESTION: 180

CISA Exam Discussions & Posts