Question 1

An IS auditor performing an audit of backup procedures observes that backup tapes are picked up weekly and stored offsite at a third-party hosting facility. Which of the following recommendations would be the BEST way to protect the integrity of the data on the backup tapes?

Options :

A : Ensure that data is encrypted before leaving the facility.

B : Confirm that data transfers are logged and recorded.

C : Confirm that data is transported in locked tamper-evident containers.

D : Ensure that the transport company obtains signatures for all shipments.

Answer: C

Question 2

How does a switched network reduce the risk of network sniffing?

Options :

A : Switches can detect active packet sniffing devices in their subnet.

B : Packets are not broadcasted throughout the whole subnet.

C : Network traffic is generally reduced.

D : Source and destination addresses are encrypted.

Answer: B

Question 3

Which of the following is the BEST methodology to use for estimating the complexity of developing a large business application?

Options :

A : Software cost estimation

B : Work breakdown structure

C : Critical path analysis

D : Function point analysis

Answer: D

Question 4

Which of the following issues associated with a data center's closed circuit television (CCTV) surveillance cameras should be of MOST concern to an IS auditor?

Options :

A : CCTV recordings are not regularly reviewed.

B : CCTV records are deleted after one yea.

C : CCTV footage is not recorded 24 x 7.

D : CCTV cameras are not installed in break rooms.

Answer: A

Question 5

Which of the following is the BEST way for an IS auditor to validate that employees have been made aware of the organization's information security policy?

Options :

A : Interview employees to determine their level of understanding of the policy.

B : Compare the employee roster against a list of those who attended security training.

C : Review HR records for employee violations of the information security policy.

D : Review the training process to determine how policies are explained to employees.

Answer: B

Free CISA Mock Exam – Practice Online Confidently

Buying Options: