QUESTION: 253

For an organization that has plans to implement web-based trading, it would be MOST important for an IS auditor to verify the organization's information security plan includes:

security training prior to implementation,
the firewall configuration for the web server.
security requirements for the new application.
attributes for system passwords.

Answer(s): C

Show Answer Next Question

QUESTION: 254

Which cloud deployment model is MOST likely to be limited in scalability?

Hybrid
Private
Community
Public

Answer(s): B

Show Answer Next Question

QUESTION: 255

After the release of an application system, an IS auditor wants to verify that the system is providing value to the organization. The auditor's BEST course of action would be to:

review the results of compliance testing.
perform a gap analysis against the benefits defined in the business case.
quantify improvements in client satisfaction.
confirm that risk has declined since the application system release.

Answer(s): B

Show Answer Next Question

QUESTION: 256

A chief information officer (CIO) has asked an IS auditor to implement several security controls for an organization's IT processes and systems. The auditor should:

refuse due to independence issues.
communicate the conflict of interest to audit management.
perform the assignment and future audits with the due professional care.
obtain approval from executive management for the implementation.

Answer(s): B

Show Answer Next Question

Free ISACA CISA Exam Braindumps (page: 65)

QUESTION: 253

QUESTION: 254

QUESTION: 255

QUESTION: 256

CISA Exam Discussions & Posts