Certified Information Systems Auditor Exam Questions PDF download

QUESTION: 61

Which of the following is the BEST performance indicator for the effectiveness of an incident management program?

Incident alert meantime
Number of incidents reported
Average time between incidents
Incident resolution meantime

Answer(s): D

Reveal Solution Next Question

QUESTION: 62

Backups will MOST effectively minimize a disruptive incident's impact on a business if they are:

taken according to recovery point objectives (RPOs).
scheduled according to the service delivery objectives.
performed by automated backup software on a fixed schedule.
stored on write-once read-many media.

Answer(s): A

Reveal Solution Next Question

QUESTION: 63

An IS audit reveals that an organization is not proactively addressing known vulnerabilities. Which of the following should the IS auditor recommend the organization do FIRST?

Ensure the intrusion prevention system (IPS) is effective.
Verify the disaster recovery plan (DRP) has been tested.
Assess the security risks to the business.
Confirm the incident response team understands the issue.

Answer(s): C

Reveal Solution Next Question

An IS auditor has completed the fieldwork phase of a network security review and is preparing the initial draft of the audit report. Which of the following findings should be ranked as the HIGHEST risk?

Network penetration tests are not performed.
The network firewall policy has not been approved by the information security officer.
Network firewall rules have not been documented.
The network device inventory is incomplete.

Answer(s): D

Reveal Solution Next Question