Cisa domain 3 questions - Study guides, Class notes & Summaries

Domain 3 (CISA Review Questions, Answers & Explanations Manual, 12th Edition | Print | English) A3-1 Who should review and approve system deliverables as they are defined and accomplished, to ensure the successful completion and implementation of a new business system application? A. User management B. Project steering committee C. Senior management D. Quality assurance staff - Answer- A is the correct answer. Justification: A. User management assumes ownership of the project and resul...

CISA - Domain 3 Questions An organization has implemented an online customer help desk application using a software as a service (SaaS) operating model. An IS auditor is asked to recommend the best control to monitor the service level agreement (SLA) with the SaaS vendor as it relates to availability. What is the BEST recommendation that the IS auditor can provide? a) Ask the SaaS vendor to provide a weekly report on application uptime. b) Implement an online polling tool to monitor the app...

CISA Domain 5 Study Terms Exam 132 Questions with Verified Answers WiFi Security - Disable vs. Enable - CORRECT ANSWER Enable MAC Filtering Enable Encryption Disable SSID Disable DHCP WEP - CORRECT ANSWER Weakest form of wireless encryption WPA-2 - CORRECT ANSWER strongest encryption standard for wireless; only protects data in-transit war driving - CORRECT ANSWER term used to describe the process of a hacker who, armed with a laptop or other wireless device along with some hackin...

CISA QAE Domain 5 Exam 89 Questions with Verified Answers When reviewing an organization's logical access security to its remote systems, which of the following would be of GREATEST concern to an IS auditor? - CORRECT ANSWER Unencrypted passwords are used. When evaluating the technical aspects of logical security, unencrypted passwords represent the greatest risk because it would be assumed that remote access would be over an untrusted network where passwords could be discovered. Which...

CISA Domain 5 Exam 109 Questions with Verified Answers Information security steering committee - CORRECT ANSWER Security policies, guidelines and procedures affect the entire organization and as such, should have the support and suggestions of end users, executive management, auditors, security admins, information systems personnel and legal counsel. Therefore, individuals representing various management levels should meet as a committee to discuss these issues and establish and approve secur...

CISA InFo Domain 1 Exam 20 Questions with Verified Answers C. Mode Mode identifies the number of times a particular number is duplicated more than once. For example the in the followinglist of numbers find the mode: The mode is 3. - CORRECT ANSWER In sampling which of the following is a measure of central tendency? A. Variance B. Range C. Mode D. Standard Deviation A. Ability, as an IS auditor to be independent of existing IS relationships. Independence should be continually as...

Certified Information Systems Auditor (CISA) Cert Guide 109 Questions with Verified Answers Which of the following best describes a baseline document? a. A PCI industry standard requiring a 15-minute session timeout b. Installation step recommendations from the vendor for an Active Directory server c. A network topography diagram of the Active Directory forest d. Security configuration settings for an Active Directory server - CORRECT ANSWER D. A baseline is correct because it is a platfo...

CISA Domain 2 Exam 100 Questions with Verified Answers What does EGIT stand for? What is it's meaning? - CORRECT ANSWER Enterprise Governance of Information and Technology. It a system composed of stakeholders, board of directors, department managers, and internal customers who provide input into the IT decision making process. What are the three broad processes in the EGIT framework are: - CORRECT ANSWER 1. IT Resource Management - Focuses on maintainng an updated inventory of all IT res...

CISA Domain 1 Exam 88 Questions with Verified Answers Interviewing and Observing Personnel - CORRECT ANSWER Actual Functions - An adequate test to ensure that the individual who is assigned and authorized to perform a particular function is the person who is actually doing the job. Actual Processes and Procedures - allows the IS auditor to gain evidence of compliance and observe deviations, if any. Security Awareness - Should be observed to verify an individuals understanding and practice ...

Domain 4 CISA Exam 325 Questions with Verified Answers what identifies and locates assets within a limited radius? - CORRECT ANSWER RFID- Radio Frequency Identification What uses radio waves to identify tagged objects? - CORRECT ANSWER RFID- Radio Frequency Identification In (RFID) Radio Frequency Identification, uses radio waves to identify TAGGED objects. What is included in a tag? - CORRECT ANSWER A tag includes a microchip and antenna. Microchip stores info and Antenna transmits inf...