Question 1

Which of the following management decisions presents the GREATEST risk associated with data leakage?

Options :

A : Staff is allowed to work remotely.

B : There is no requirement for desktops to be encrypted.

C : Security awareness training is not provided to staff.

D : Security policies have not been updates in the past year

Answer: B

Question 2

Which of the following activities would allow an IS auditor to maintain independence while facilitating a control self-assessment (CSA)?

Options :

A : Implementing the remediation plan

B : Developing the remediation plan

C : Developing the CSA questionnaire

D : Partially completing the CSA

Answer: C

Question 3

Which of the following is MOST important to have in place to build consensus among key stakeholders on the cost-effectiveness of IT?

Options :

A : IT project governance and management

B : Standardized enterprise architecture (EA)

C : IT performance monitoring and reporting

D : A uniform IT chargeback process

Answer: C

Question 4

Management has decided to include a compliance manager in the approval process for a new business that may require changes to the IT infrastructure. Which of the following is the GREATEST benefit of this approach?

Options :

A : Process accountabilities to external stakeholders are improved.

B : Security breach incidents can be identified in early stages.

C : Regulatory risk exposures can be identified before they materialize.

D : Fewer reviews are needed when updating the IT compliance process.

Answer: C

Question 5

An organization with many desktop PCs is considering moving to a thin client architecture. Which of the following is the MAJOR advantage?

Options :

A : Administrative security can be provided for the client.

B : System administration can be better managed.

C : The security of the desktop PC is enhanced.

D : Desktop application software will never have to be upgraded.

Answer: D

Confidently Practice Online with Free CISA Exam Cram

Buying Options: