CISA Practice Test

CISA Practice Test practice questions, page 29 of 73, with answer review and explanations.

Question 141

What is the BEST method for securing credit card numbers stored temporarily on a file server prior to transmission to the downstream system for payment processing?

  1. Masking the full credit card number
  2. Encryption with strong cryptography
  3. Truncating the credit card number
  4. One-way hash with strong cryptography

Question 142

When removing a financial application system from production, which of the following is MOST important?

  1. Media used by the retired system has been sanitized.
  2. Software license agreements are retained.
  3. End-user requests for changes are recorded and tracked.
  4. Data retained for regulatory purposes can be retrieved.

Question 143

In a 24/7 processing environment, a database contains several privileged application accounts with passwords set to "never expire." Which of the following recommendations would BEST address the risk with minimal disruption to the business?

  1. Schedule downtime to implement password changes.
  2. Introduce database access monitoring into the environment.
  3. Modify the access management policy to make allowances for application accounts.
  4. Modify applications to no longer require direct access to the database.

Question 144

The risk of communication failure in an e-commerce environment is BEST minimized through the use of:

  1. alternative or diverse routing.
  2. compression software to minimize transmission duration.
  3. functional or message acknowledgments.
  4. a packet filtering firewall to reroute messages

Question 145

What is the PRIMARY benefit of an audit approach which requires reported findings to be issued together with related action plans, owners, and target dates?

  1. It establishes accountability for the action plans.
  2. It enforces action plan consensus between auditors and auditees.
  3. It facilitates easier audit follow-up.
  4. It helps to ensure factual accuracy of findings.