CISA Certification Exam Questions with AI Explanations

QUESTION: 96

Which of the following is the BEST control to mitigate attacks that redirect Internet traffic to an unauthorized website?

Utilize a network-based firewall.
Conduct regular user security awareness training.
Enforce a strong password policy meeting complexity requirements.
Perform domain name system (DNS) server security hardening.

Answer(s): D

Reveal Solution Next Question

During a follow-up audit, an IS auditor learns that some key management personnel have been replaced since the original audit, and current management has decided not to implement some previously accepted recommendations. What is the auditor's BEST course of action?

Retest the control.
Notify the audit manager.
Close the audit finding.
Notify the chair of the audit committee

Answer(s): B

Reveal Solution Next Question

QUESTION: 98

An organization wants to classify database tables according to its data classification scheme. From an IS auditor's perspective, the tables should be classified based on the:

specific functional contents of each single table.
frequency of updates to the table.
number of end users with access to the table.
descriptions of column names in the table.

Answer(s): A

Reveal Solution Next Question

QUESTION: 99

Management is concerned about sensitive information being intentionally or unintentionally emailed as attachments outside the organization by employees. What is the MOST important task before implementing any associated email controls?

Provide notification to employees about possible email monitoring.
Develop an information classification scheme.
Develop an acceptable use policy for end-user computing (EUC).
Require all employees to sign nondisclosure agreements (NDAs).

Answer(s): B

Reveal Solution Next Question

QUESTION: 100

While auditing a small organization's data classification processes and procedures, an IS auditor noticed that data is often classified at the incorrect level. What is the MOST effective way for the organization to improve this situation?

Conduct awareness presentations and seminars for information classification policies.
Use automatic document classification based on content.
Have IT security staff conduct targeted training for data owners.
Publish the data classification policy on the corporate web portal.

Answer(s): C

Reveal Solution Next Question

ISACA Certified Information Systems Auditor CISA Exam Questions in PDF

Free ISACA CISA Dumps Questions (page: 20)

QUESTION: 96

QUESTION: 97

QUESTION: 98

QUESTION: 99

QUESTION: 100