CISA Practice Test

CISA Practice Test practice questions, page 54 of 73, with answer review and explanations.

Question 266

When reviewing the functionality of an intrusion detection system (IDS), the IS auditor should be MOST concerned if:

  1. legitimate packets blocked by the system have increased.
  2. false positives have been reported.
  3. detected events have increased.
  4. actual attacks have not been identified.

Question 267

An organization is disposing of a system containing sensitive data and has deleted all files from the hard disk. An IS auditor should be concerned because:

  1. deleted data cannot easily be retrieved.
  2. backup copies of files were not deleted as well.
  3. deleting all files separately is not as efficient as formatting the hard disk.
  4. deleting the files logically does not overwrite the files' physical data.

Question 268

What is the MOST difficult aspect of access control in a multiplatform, multiple-site client/server environment?

  1. Restricting a local user to necessary resources on a local platform
  2. Creating new user IDs valid only on a few hosts
  3. Maintaining consistency throughout all platforms
  4. Restricting a local user to necessary resources on the host server

Question 269

Following significant business model changes, which of the following is the MOST important consideration when updating the IT policy?

  1. The policy is endorsed by IT leadership.
  2. The policy is compliant with relevant laws and regulations.
  3. The policy is integrated into job descriptions.
  4. The policy is aligned with industry standards and best practice.

Question 270

During the design phase of a software development project, the PRIMARY responsibility of an IS auditor is to evaluate the:

  1. development methodology employed.
  2. controls incorporated into the system specifications.
  3. future compatibility of the design.
  4. proposed functionality of the application.