QUESTION: 349

An IS auditor finds that application servers had inconsistent security settings leading to potential vulnerabilities. Which of the following is the BEST recommendation by the IS auditor?

Improve the change management process
Perform a configuration review
Establish security metrics
Perform a penetration test

Answer(s): B

Show Answer Next Question

QUESTION: 350

When conducting a post-implementation review of a new software application, an IS auditor should be MOST concerned with an increasing number of:

change requests approved to add new services.
updates required for the end-user operations manual.
operational errors impacting service delivery.
help desk calls requesting future enhancements.

Answer(s): C

Show Answer Next Question

QUESTION: 351

When an IS auditor evaluates key performance indicators (KPIs) for IT initiatives, it is MOST important that the KPIs indicate:

IT deliverables are process driven.
IT objectives are measured.
IT resources are fully utilized.
IT solutions are within budget.

Answer(s): B

Show Answer Next Question

QUESTION: 352

In which phase of penetration testing would host detection and domain name system (DNS) interrogation be performed?

Reporting
Attacks
Discovery
Planning

Answer(s): C

Show Answer Next Question

Free ISACA CISA Exam Braindumps (page: 89)

QUESTION: 349

QUESTION: 350

QUESTION: 351

QUESTION: 352

CISA Exam Discussions & Posts