CISA Questions And Answers

21⟩ An organization provides information to its supply-chain partners and customers through an extranet infrastructure. Which of the following should be the GREATEST concern to an IS auditor reviewing the firewall security architecture?

1. A secure sockets layer (SSL) has been implemented for user authentication and remote administration of the firewall.

2. On the basis of changing requirements, firewall policies are updated.

3. Inbound traffic is blocked unless the traffic type and connections have been specifically permitted.

4. The firewall is placed on top of the commercial operating system with all installation options.

Answer: D

Is this answer helpful? 0 Yes | 0 No

Answer This Question

208 views

22⟩ In reviewing the IS short-range (tactical) plan, the IS auditor should determine whether

1. there is an integration of IS and business staffs within projects.

2. there is a clear definition of the IS mission and vision.

3. there is a strategic information technology planning methodology in place.

4. the plan correlates business objectives to IS goals and objectives.

Answer: A

Is this answer helpful? 0 Yes | 0 No

Answer This Question

190 views

23⟩ An IS auditor is performing an audit of a network operating system. Which of the following is a user feature the IS auditor should review?

1. Availability of online network documentation

2. Support of terminal access to remote hosts

3. Handling file transfer between hosts and interuser communications

4. Performance management, audit and control

Answer: A

Is this answer helpful? 0 Yes | 0 No

Answer This Question

186 views

24⟩ An organization with extremely high security requirements is evaluating the effectiveness of biometric systems. Which of the following performance indicators is MOST important?

1. False-acceptance rate (FAR)

2. Equal-error rate (EER)

3. False-rejection rate (FRR)

4. False-identification rate (FIR)

Answer: A

Is this answer helpful? 0 Yes | 0 No

Answer This Question

169 views

25⟩ A certifying authority (CA) can delegate the processes of

1. revocation and suspension of a subscriber's certificate.

2. generation and distribution of the CA public key.

3. establishing a link between the requesting entity and its public key.

4. issuing and distributing subscriber certificates.

Answer: C

Is this answer helpful? 0 Yes | 0 No

Answer This Question

166 views

CISA

Home Information Technology (IT) CISA

25 CISA Questions And Answers

21⟩ An organization provides information to its supply-chain partners and customers through an extranet infrastructure. Which of the following should be the GREATEST concern to an IS auditor reviewing the firewall security architecture?

22⟩ In reviewing the IS short-range (tactical) plan, the IS auditor should determine whether

23⟩ An IS auditor is performing an audit of a network operating system. Which of the following is a user feature the IS auditor should review?

24⟩ An organization with extremely high security requirements is evaluating the effectiveness of biometric systems. Which of the following performance indicators is MOST important?

25⟩ A certifying authority (CA) can delegate the processes of

Quick Links:

CISA

Home Information Technology (IT) CISA

25 CISA Questions And Answers

21⟩ An organization provides information to its supply-chain partners and customers through an extranet infrastructure. Which of the following should be the GREATEST concern to an IS auditor reviewing the firewall security architecture?

22⟩ In reviewing the IS short-range (tactical) plan, the IS auditor should determine whether

23⟩ An IS auditor is performing an audit of a network operating system. Which of the following is a user feature the IS auditor should review?

24⟩ An organization with extremely high security requirements is evaluating the effectiveness of biometric systems. Which of the following performance indicators is MOST important?

25⟩ A certifying authority (CA) can delegate the processes of

BE THE FIRST TO KNOW

Quick Links: