QUESTION: 333

When evaluating the ability of a disaster recovery plan (DRP) to enable the recovery of IT processing capabilities, it is MOST important for the IS auditor to verify the plan is:

stored at an offsite location.
communicated to department heads.
regularly reviewed.
periodically tested.

Answer(s): D

Show Answer Next Question

QUESTION: 334

During a disaster recovery audit, an IS auditor finds that a business impact analysis (BIA) has not been performed. The auditor should FIRST:

conduct additional compliance testing.
issue an intermediate report to management.
perform a business impact analysis (BIA).
evaluate the impact on current disaster recovery capability.

Answer(s): D

Show Answer Next Question

During a review, an IS auditor discovers that corporate users are able to access cloud-based applications and data from any Internet-connected web browser.
Which of the following is the auditor's BEST recommendation to help prevent unauthorized access?

Utilize strong anti-malware controls on all computing devices.
Implement an intrusion detection system (IDS).
Update security policies and procedures.
Implement multi-factor authentication.

Answer(s): D

Show Answer Next Question

QUESTION: 336

To create a digital signature in a message using asymmetric encryption, it is necessary to:

encrypt the authentication sequence using a public key.
first use a symmetric algorithm for the authentication sequence.
transmit the actual digital signature in unencrypted clear text.
encrypt the authentication sequence using a private key.

Answer(s): D

Show Answer Next Question

Free ISACA CISA Exam Braindumps (page: 85)

QUESTION: 333

QUESTION: 334

QUESTION: 335

QUESTION: 336

CISA Exam Discussions & Posts