Cisa questions Study guides, Study notes & Summaries

CISA QAE Domain 5 Exam 89 Questions with Verified Answers When reviewing an organization's logical access security to its remote systems, which of the following would be of GREATEST concern to an IS auditor? - CORRECT ANSWER Unencrypted passwords are used. When evaluating the technical aspects of logical security, unencrypted passwords represent the greatest risk because it would be assumed that remote access would be over an untrusted network where passwords could be discovered. Which...

CISA QUESTIONS AND ANSWERS 100% CORRECT 5 Tasks within the domain covering the process of auditing information systems 1. Develop and implement a risk-based IT audit strategy in compliance with IT audit standards to ensure that key areas are included 2. Plan specific audits to determine whether information systems are protected, controlled and provided value to the organization 3. Conduct audits in accordance with IT audit standards to achieve planned audit objectives 4. Report audit findin...

CISA TEST BANK/ ALL CISA EXAM QUESTIONS AND ANSWERS WITH RATIONALE, 100% ACCURATE. LATEST UPDATE/ (CLICK CTR+ F TO SEARCH FOR QUESTIONS AND ANSWER) CISA Questions (1-100), CISA Questions (101-200), CISA Questions 201 - 300, CISA Questions (301 - 400), CISA Questions (401 - 500), CISA Questions (501 - 600), CISA Questions (601-700), CISA Questions (701-800), CISA Questions (801 - 900), CISA Questions (1000- The internal audit department has written some scripts that ar...

CISA QUESTIONS (1-100), CISA QUESTIONS (101-200), CISA QUESTIONS 201 - 300, CISA QUESTIONS (301 - 400), CISA QUESTIONS (401 - 500), CISA QUESTIONS (501 - 600), CISA QUESTIONS (601-700), CISA QUESTIONS (701-800), CISA QUESTIONS (801 - 900)

CISA QUESTIONS AND ANSWERS 100% VERIFIED Parameter tampering An attack where the hacker manipulates parameters within the URL string in hopes of modifying data. Web application developers sometimes use hidden fields to save information about a client session or to submit hidden parameters, such as the language of the end user, to the underlying application. Because hidden form fields do not display in the browser, developers may feel safe passing unvalidated data in the hidden fields (to be...

The internal audit department has written some scripts that are used for continuous auditing of some information systems. The IT department has asked for copies of the scripts so that they can use them for setting up a continuous monitoring process on key systems. Would sharing these scripts with IT affect the ability of the IS auditors to independently and objectively audit the IT function? Select an answer: A. Sharing the scripts is not permitted because it would give IT the ability to p...

CISA QUESTIONS AND ANSWERS 2024 Email authenticity and confidentiality is best achieves by signing the message using the: Sender's private key and encrypting the message using the receiver's public key- authenticity - public key; confidentiality receivers public keg Nonrepudiation is a process that: the assurance that someone cannot deny something. Encryption of Data The most secure method of protecting confidential data from exposure. To enhance the security and relia...

ISACA CISA Questions (701-800) Questions and Verified Answers (2024 / 2025)/ A+ GRADE

ISACA CISA Questions (401 - 500) Questions and Verified Answers (2024 / 2025)/ A+ GRADE

CISA questions and answers Questions and answers, graded A+ Which of the following is an analytical review procedure for a payroll system? A. Performing penetration attempts on the payroll system B. Evaluating the performance of the payroll system, using benchmarking software C. Performing reasonableness tests by multiplying the number of employees by the average wage rate D. Testing hours reported on time sheets - -C. Performing reasonableness tests by multiplying the number of employe...