[Dec 30, 2022] CISA Exam Dumps, CISA Practice Test Questions [Q257-Q276] – IT Certification Exam Questions & Answers

Rate this post

[Dec 30, 2022] CISA Exam Dumps, CISA Practice Test Questions

Free CISA Study Guides Exam Questions and Answer

What are the strengths of the candidate who wants to take the ISACA CISA Exam

There are qualified and knowledgeable instructors. They specialize in the subject matter and can teach it well. The facilities that the school has for learning purposes are extremely sophisticated and modern. The library is large and full of resources for students to enjoy and boost their learning abilities. The school has a good reputation in the community, which means students can find jobs easily with a degree from this university. An online program makes it possible for more people to enroll in the university even if they have family or work commitments. This is an excellent option for someone who is looking to get ahead in their career but doesn’t have the time or money to go away from home anymore.

NO.257 An IS auditor conducting an access control review in a client-server environment discovers that all printing
options are accessible by all users. In this situation, the IS auditor is MOST likely to conclude that:

exposure is greater, since information is available to unauthorized users.

operating efficiency is enhanced, since anyone can print any report at any time.

operating procedures are more effective, since information is easily available.

user friendliness and flexibility is facilitated, since there is a smooth flow of information among users.

NO.258 Which of the following should be a concern to an IS auditor reviewing a digital forensic process for a security incident?

The media with the original evidence was not write-blocked.

The forensic expert used open-source forensic tools.

The affected computer was not immediately shut down after the incident.

Analysis was performed using an image of the original media.

NO.259 Which of the following is the GREATEST advantage of elliptic curve encryption over RSA encryption?

Computation speed

Ability to support digital signatures

Simpler key distribution

Greater strength for a given key length

NO.260 An organization has just completed their annual risk assessment. Regarding the business continuity plan, what should an IS auditor recommend as the next step for the organization?

Review and evaluate the business continuity plan for adequacy

Perform a full simulation of the business continuity plan

Train and educate employees regarding the business continuity plan

Notify critical contacts in the business continuity plan

NO.261 Which of the following is the PRIMARY role of a data custodian?

Processing information

Securing information

Classifying information

Validating information

NO.262 A live test of a mutual agreement for IT system recovery has been carried out, including a four-hour test of intensive usage by the business units. The test has been successful, but gives only partial assurance that the:

system and the IT operations team can sustain operations in the emergency environment.

resources and the environment could sustain the transaction load.

connectivity to the applications at the remote site meets response time requirements.

workflow of actual business operations can use the emergency system in case of a disaster.

NO.263 A trojan horse simply cannot operate autonomously.

true

false

NO.264 Which of the following would MOST likely impair the independence of the IS auditor when performing a post-implementation review of an application system?

The IS auditor implemented a specific control during the development of the application system.

The IS auditor designed an embedded audit module exclusively for auditing the application system.

The IS auditor participated as a member of the application system pro)ecl team.
but did not have operational responsibilities.

The IS auditor provided consulting advice concerning application system best practices.

NO.265 In an IS auditor’s review of an organization s configuration management practices for software, which of the following is MOST important?

Post-implementation review reports from development efforts

Service level agreements (SLAs) between the IT function and users

Organizational policies related to release management

Software rental contracts or lease agreements

NO.266 Which of the following should be considered FIRST when implementing a risk management program?

An understanding of the organization’s threat, vulnerability and risk profile

An understanding of the risk exposures and the potential consequences of compromise

A determination of risk management priorities based on potential consequences

A risk mitigation strategy sufficient to keep risk consequences at an acceptable level

NO.267 Which of the following is the MOST effective way to verity an organization’s ability to continue its essential business operations after a disruption event?

Analysis of business impact

Analysis of call trees

Analysis of recovery pout objectives (RPOs)

Analysis of end-to-end recovery flow

NO.268 A small organization is experiencing rapid growth and plans to create a new information security policy.
Which of the following is MOST relevant to creating the policy?

Industry standards

The business objectives

The business impact analysis (BIA)

Previous audit recommendations

NO.269 The editing/validation of data entered at a remote site would be performed MOST effectively at the:

central processing site after running the application system.

central processing sire during the running of the application system.

remote processing site after transmission of the data to the central processing site.

remote processing site prior to transmission of the data to the central processing site.

NO.270 An organization is disposing of a number of laptop computers. Which of the following data destruction methods would be the MOST effective?

Run a low-level data wipe utility on all hard drives

Erase all data file directories

Format all hard drives

Physical destruction of the hard drive

NO.271 The IS auditor learns that when equipment was brought into the data center by a vendor, the emergency power shutoff switch was accidentally pressed and the UPS was engaged. Which of the following audit recommendations should the IS auditor suggest?

Relocate the shut off switch.

Install protective covers.

Escort visitors.

Log environmental failures.

NO.272 Which of the following is the BEST method for preventing the leakage of confidential information in a laptop
computer?

Encrypt the hard disk with the owner’s public key.

Enable the boot password (hardware-based password).

Use a biometric authentication device.

Use two-factor authentication to logon to the notebook.

NO.273 Which of the following statement correctly describes difference between SSL and S/HTTP?

Both works at application layer of OSI model

SSL works at transport layer where as S/HTTP works at application layer of OSI model

Both works at transport layer

S/HTTP works at transport layer where as SSL works at the application layer of OSI model

Section: Protection of Information Assets
Explanation:
For your exam you should know below information about S/HTTP and SSL protocol:
Secure Hypertext Transfer Protocol (S/HTTP) -As an application layer protocol, S/HTTP transmits individual messages or pages securely between a web client and server by establishing SSL-type connection. Using the https:// designation in the URL, instead of the standard http://, directs the message to a secure port number rather than the default web port address. This protocol utilizes SSL secure features but does so as a message rather than the session-oriented protocol.
Secure Socket Layer (SSL) and Transport Layer Security (TLS) – These are cryptographic protocols which provide secure communication on Internet. There are only slight difference between SSL 3.0 and TLS 1.0.
For general concept both are called SSL.
SSL is session-connection layer protocol widely used on Internet for communication between browser and web servers, where any amount of data is securely transmitted while a session is established. SSL provides end point authentication and communication privacy over the Internet using cryptography. In typical use, only the server is authenticated while client remains unauthenticated. Mutual authentication requires PKI development to clients. The protocol allows application to communicate in a way designed to prevent eavesdropping, tampering and message forging.
SSL involves a number of basic phases
Peer negotiation for algorithm support
Public-key, encryption based key exchange and certificate based authentication Symmetric cipher based traffic encryption.
SSL runs on a layer beneath application protocol such as HTTP, SMTP and Network News Transport Protocol (NNTP) and above the TCP transport protocol, which forms part of TCP/IP suite.
SSL uses a hybrid hashed, private and public key cryptographic processes to secure transmission over the INTERNET through a PKI.
The SSL handshake protocol is based on the application layer but provides for the security of the communication session too. It negotiates the security parameter for each communication section. Multiple session can belong to one SSL session and the participating in one session can take part in multiple simultaneous sessions.
The following were incorrect answers:
The other choices presented in the options are not valid asSSL works at transport layer where as S/HTTP works at application layer of OSI model.
Reference:
CISA review manual 2014 Page number 352

NO.274 Which of the following is the MOST important determining factor when establishing appropriate timeframes for follow-up activities related to audit findings?

Availability of IS audit resources

Remediation dates included in management responses

Peak activity periods for the business

Complexity of business processes identified in the audit

NO.275 During an audit, an IS auditor notices that the IT department of a medium-sized organization has no separate risk management function, and the organization’s operational risk documentation only contains a few broadly described IT risks. What is the MOST appropriate recommendation in this situation?

Create an IT risk management department and establish an IT risk framework with the aid of external risk management experts.

Use common industry standard aids to divide the existing risk documentation into several individual risks which will be easier to handle.

No recommendation is necessary since the current approach is appropriate for a medium-sized organization.

Establish regular IT risk management meetings to identify and assess risks, and create a mitigation plan as input to the organization’s risk management.

NO.276 Which of the following attack is against computer network and involves fragmented or invalid ICMP packets sent to the target?

Nuke attack

Brute force attack

Buffer overflow

Pulsing Zombie

Explanation/Reference:
A Nuke attack is an old denial-of-service attack against computer networks consisting of fragmented or otherwise invalid ICMP packets sent to the target, achieved by using a modified ping utility to repeatedly send this corrupt data, thus slowing down the affected computer until it comes to a complete stop.
A specific example of a nuke attack that gained some prominence is the Win Nuke, which exploited the vulnerability in the NetBIOS handler in Windows 95. A string of out-of-band data was sent to TCP port 139 of the victim’s machine, causing it to lock up and display a Blue Screen of Death (BSOD).
The following answers are incorrect:
Brute force attack – Brute force (also known as brute force cracking) is a trial and error method used by application programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort (using brute force) rather than employing intellectual strategies. Just as a criminal might break into, or “crack” a safe by trying many possible combinations, a brute force cracking application proceeds through all possible combinations of legal characters in sequence. Brute force is considered to be an infallible, although time-consuming, approach.
Buffer overflow – A buffer overflow occurs when a program or process tries to store more data in a buffer (temporary data storage area) than it was intended to hold. Since buffers are created to contain a finite amount of data, the extra information – which has to go somewhere – can overflow into adjacent buffers, corrupting or overwriting the valid data held in them. Although it may occur accidentally through programming error, buffer overflow is an increasingly common type of security attack on data integrity.
Pulsing Zombie – A Dos attack in which a network is subjected to hostile pinging by different attacker computer over an extended time period.
Following reference(s) were/was used to create this question:
CISA review manual 2014 Page number 322