Free CISA Exam braindumps download (CISA exam dumps Free)

QUESTION: 486

Which of the following components of a risk assessment is MOST helpful to management in determining the level of risk mitigation to apply?

Impact assessment
Control self-assessment (CSA)
Risk classification
Risk identification

Answer(s): A

Show Answer Next Question

QUESTION: 487

Which of the following is the MOST effective control to ensure electronic records beyond their retention periods are deleted from IT systems?

Execute all data deletions at a predefined month during the year.
Build in system logic to trigger data deletion at predefined times.
Review the record retention register regularly to initiate data deletion.
Perform a sample check of current data against the retention schedule.

Answer(s): B

Show Answer Next Question

QUESTION: 488

Which of the following is the BEST way to mitigate risk to an organization's network associated with devices permitted under a bring your own device (BYOD) policy?

Implement a network access control system.
Require personal devices to be reviewed by IT staff.
Enable port security on all network switches.
Ensure the policy requires antivirus software on devices.

Answer(s): A

Show Answer Next Question

QUESTION: 489

Which of the following system conversion strategies provides the GREATEST redundancy?

Direct cutover
Parallel run
Phased approach
Pilot study

Answer(s): B

Show Answer Next Question

QUESTION: 490

Which of the following is the PRIMARY reason that asset classification is vital to an information security program?

To ensure risk mitigation efforts are adequate
To ensure asset protection efforts are in line with industry standards
To ensure sufficient resources are allocated for information security
To ensure the appropriate level of protection to assets

Answer(s): D

Show Answer Next Question

Free CISA Exam Braindumps Certified Information Systems Auditor Questions 486–490 (page: 99)

QUESTION: 486

QUESTION: 487

QUESTION: 488

QUESTION: 489

QUESTION: 490

Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 486–490 (page: 99)