Isaca Certification CISA Full Course Free

Certified Information Systems Auditor Questions and Answers

Question 113

which of the following is a core functionality of a configuration and release management system?

Managing privileged access to databases servers and infrastructure

Identifying vulnerabilities in configuration settings

Deploying a configuration change to the sandbox environment

Identifying other configuration items that will be impacted by a given change

Question 114

Which of the following is the MOST important consideration for patching mission critical business application servers against known vulnerabilities?

Patches are implemented in a test environment prior to rollout into production.

Network vulnerability scans are conducted after patches are implemented.

Vulnerability assessments are periodically conducted according to defined schedules.

Roles and responsibilities for implementing patches are defined

Question 115

Which of the following should be of MOST concern to an IS auditor when reviewing an intrusion detection system (IDS)?

High false-positive rate

Delay in signature updates

High false-negative rate

Decrease in processing speed

Question 116

Having knowledge in which of the following areas is MOST relevant for an IS auditor reviewing public key infrastructure (PKI)?

Design and application of key controls in public audit

Security strategy in public cloud Infrastructure as a Service (IaaS)

Modern encoding methods for digital communications

Technology and process life cycle for digital certificates and key pairs