CISA Practice Test

CISA Practice Test practice questions, page 28 of 73, with answer review and explanations.

Question 136

An organization's strategy to source certain IT functions from a software as a service (SaaS) provider should be approved by the:

  1. IT steering committee.
  2. chief financial officer (CFO).
  3. IT operations manager.
  4. chief risk officer (CRO).

Question 137

An organization experienced a domain name system (DNS) attack caused by default user accounts not being removed from one of the servers. Which of the following would have been the BEST way to mitigate the risk of this DNS attack?

  1. Require all employees to attend training for secure configuration management.
  2. Have a third party configure the virtual servers.
  3. Configure the servers from an approved standard configuration.
  4. Configure the intrusion prevention system (IPS) to identify DNS attacks.

Question 138

The BEST indicator of an optimized quality management system (QMS) is that it:

  1. is endorsed by senior management
  2. aligns with an industry recognized framework.
  3. is integrated and enforced in all IT activities.
  4. defines and monitors all IT QMS activities.

Question 139

When developing customer-facing IT applications, in which stage of the system development life cycle (SLC) MOST beneficial to consider data privacy principles?

  1. User acceptance testing (UAT)
  2. Systems design and architecture
  3. Requirements definition
  4. Software selection and acquisition

Question 140

An organization is shifting to a remote workforce. In preparation, the IT department is performing stress and capacity testing of remote access infrastructure and systems. What type of control is being implemented?

  1. Directive
  2. Detective
  3. Preventive
  4. Compensating