Free Access to ISACA.CISA.v2022-02-26.q471 with Valid Practice Test (Page 79)

Question 386

To support an organization's goals, an IS department should have:

A.a low-cost philosophy.
B.long- and short-range plans.
C.leading-edge technology.
D.plans to acquire new hardware and software.

Question 387

An IS auditor conducting a review of software usage and licensing discovers that numerous PCs contain
unauthorized software. Which of the following actions should the IS auditor take?

A.Personally delete all copies of the unauthorized software.
B.Inform the auditee of the unauthorized software, and follow up to confirm deletion.
C.Report the use of the unauthorized software and the need to prevent recurrence to auditee
management.
D.Take no action, as it is a commonly accepted practice and operations management is responsible for
monitoring such use.

Question 388

When following up on a data breach, an IS auditor finds a system administrator may have compromised
the chain of custody. Which of the following should the system administrator have done FIRST to preserve
the evidence?

A.Perform forensic discovery
B.Notify key stakeholders
C.Quarantine the system
D.Notify the incident response team

Question 389

An organization has a recovery time objective (RTO) equal to zero and a recovery point objective (RPO)
close to 1 minute for a critical system. This implies that the system can tolerate:

A.a data loss of up to 1 minute, but the processing must be continuous.
B.a 1-minute processing interruption but cannot tolerate any data loss.
C.a processing interruption of 1 minute or more.
D.both a data less and processing interruption longer than 1 minute.

Question 390

Which of the following attack redirects outgoing message from the client back onto the client, preventing outside access as well as flooding the client with the sent packets?

A.Banana attack
B.Brute force attack
C.Buffer overflow
D.Pulsing Zombie

Correct Answer: A

Explanation/Reference:
A "banana attack" is another particular type of DoS. It involves redirecting outgoing messages from the client back onto the client, preventing outside access, as well as flooding the client with the sent packets.
The Banana attack uses a router to change the destination address of a frame. In the Banana attack:
A compromised router copies the source address on an inbound frame into the destination address.
The outbound frame bounces back to the sender.
This sender is flooded with frames and consumes so many resources that valid service requests can no longer be processed.
The following answers are incorrect:
Brute force attack - Brute force (also known as brute force cracking) is a trial and error method used by application programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys, through exhaustive effort (using brute force) rather than employing intellectual strategies. Just as a criminal might break into, or "crack" a safe by trying many possible combinations, a brute force cracking application proceeds through all possible combinations of legal characters in sequence. Brute force is considered to be an infallible, although time-consuming, approach.
Buffer overflow - A buffer overflow occurs when a program or process tries to store more data in a buffer (temporary data storage area) than it was intended to hold. Since buffers are created to contain a finite amount of data, the extra information - which has to go somewhere - can overflow into adjacent buffers, corrupting or overwriting the valid data held in them. Although it may occur accidentally through programming error, buffer overflow is an increasingly common type of security attack on data integrity.
Pulsing Zombie - A Dos attack in which a network is subjected to hostile pinging by different attacker computer over an extended time period.
Following reference(s) were/was used to create this question:
CISA review manual 2014 Page number 321

Question 386

Question 387

Question 388

Question 389

Question 390

Download PDF File