QUESTION: 277

When responding to an ongoing denial of service (DoS) attack, an organization's FIRST course of action should be to:

minimize impact.
investigate damage.
analyze the attack path.
restore service.

Answer(s): A

Show Answer Next Question

QUESTION: 278

Which of the following BEST describes an audit risk?

The financial report may contain undetected material errors.
Employees have been misappropriating funds.
The company is being sued for false accusations.
Key employees have not taken vacation for 2 years.

Answer(s): A

Show Answer Next Question

QUESTION: 279

In an IT organization where many responsibilities are shared, which of the following is the BEST control for detecting unauthorized data changes?

Users are required to periodically rotate responsibilities.
Segregation of duties conflicts are periodically reviewed.
Data changes are logged in an outside application.
Data changes are independently reviewed by another group.

Answer(s): D

Show Answer Next Question

End users have been demanding the ability to use their own devices for work, but want to keep personal information out of corporate control. Which of the following would be MOST effective at reducing the risk of security incidents while satisfying end user requirements?

Encrypt corporate data on the devices.
Enable remote wipe capabilities for the devices.
Require complex passwords.
Implement an acceptable use policy.

Answer(s): A

Show Answer Next Question

Free ISACA CISA Exam Questions (page: 71)

QUESTION: 277

QUESTION: 278

QUESTION: 279

QUESTION: 280

CISA Exam Discussions & Posts