Question 1

An IS auditor is reviewing a contract for the outsourcing of IT facilities. If missing, which of the following should present the GREATEST concern to the auditor?

Options :

A : Access control requirements

B : Hardware configurations

C : Help desk availability

D : Perimeter network security diagram

Answer: A

Question 2

A contract for outsourcing IS functions should always include:

Options :

A : a provision for an independent audit of the contractor-s operations.

B : data transfer protocols.

C : the names and roles of staff to be employed in the operation.

D : full details of security procedures to be observed by the contractor.

Answer: D

Question 3

Which of the following BEST describes the role of a document owner when implementing a data classification policy in an organization?

Options :

A : Classifies documents to correctly reflect the level of sensitivity of information they contain

B : Ensures documents are handled in accordance with the sensitivity of information they contain

C : Defines the conditions under which documents containing sensitive information may be transmitted

D : Classifies documents in accordance with industry standards and best practices

Answer: A

Question 4

The MOST important measure of the effectiveness of an organization's security program is the:

Options :

A : comparison with critical incidents experienced by competitors

B : adverse impact of incidents on critical business activities.

C : number of vulnerability alerts escalated to senior management

D : number of new vulnerabilities reported.

Answer: B

Question 5

An IS auditor noted that a change to a critical calculation was placed into the production environment without being tested. Which of the following is the BEST way to obtain assurance that the calculation functions correctly?

Options :

A : Check regular execution of the calculation batch job.

B : Interview the lead system developer.

C : Obtain post-change approval from management.

D : Perform substantive testing using computer-assisted audit techniques (CAATs).

Answer: A

Confidently Practice Online with Free CISA Exam Cram

Buying Options: