Free ISACA CISA Exam Braindumps (page: 70)

A bank's web-hosting provider has just completed an internal IT security audit and provides only a summary of the findings to the bank's auditor. Which of the following should be the bank's GREATEST concern?

  1. The audit scope may not have addressed critical areas.
  2. The audit procedures are not provided to the bank.
  3. The bank's auditors are not independent of the service provider.
  4. The audit may be duplicative of the bank's internal audit procedures

Answer(s): A



An incorrect version of source code was amended by a development team. This MOST likely indicates a weakness in:

  1. change management.
  2. project management.
  3. incident management.
  4. quality assurance (QA).

Answer(s): D



An organization allows employees to retain confidential data on personal mobile devices. Which of the following is the BEST recommendation to mitigate the risk of data leakage from lost or stolen devices?

  1. Configure to auto-wipe after multiple failed access attempts.
  2. Require employees to attend security awareness training.
  3. Enable device auto-lock function.
  4. Password protect critical data files.

Answer(s): A



A new regulation in one country of a global organization has recently prohibited cross-border transfer of personal data. An IS auditor has been asked to determine the organization's level of exposure in the affected country. Which of the following would be MOST helpful in making this assessment?

  1. Identifying data security threats in the affected jurisdiction
  2. Reviewing data classification procedures associated with the affected jurisdiction
  3. Identifying business processes associated with personal data exchange with the affected jurisdiction
  4. Developing an inventory of all business entities that exchange personal data with the affected jurisdiction

Answer(s): C



Viewing page 70 of 457
Viewing questions 277 - 280 out of 1823 questions



Post your Comments and Discuss ISACA CISA exam prep with other Community members:

CISA Exam Discussions & Posts