Free Access to ISACA.CISA.v2023-03-04.q546 with Valid Practice Test (Page 84)

Request Exam Contact

Home
View All Exams
New QA's
Upload

PRACTICE EXAMS:

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
SAP
EMC
PMI
HP
Salesforce
Other

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
SAP
EMC
PMI
HP
Salesforce

Home
ISACA Certification
CISA Exam
ISACA.CISA.v2023-03-04.q546 Dumps

««
«
…
79
80
81
82
83
84
85
86
87
88
…
»
»»

Question 411

Which of the following is the GREATEST risk of an inadequate policy definition for ownership of data and systems?

A.User management coordination does not exist.
B.Specific user accountability cannot be established.
C.Unauthorized users may have access to originate, modify or delete data.
D.Audit recommendations may not be implemented.

Correct Answer: C

Without a policy defining who has the responsibility for granting access to specific systems, there is an increased risk that one could gain (be given) system access when they should not have authorization. By assigning authority to grant access to specific users, there is a better chance that business objectives will be properly supported.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 412

To ensure compliance with a security policy requiring that passwords be a combination of letters and numbers, an IS auditor should recommend that:

A.the company policy be changed.
B.passwords are periodically changed.
C.an automated password management tool be used.
D.security awareness training is delivered.

Correct Answer: C

Explanation/Reference:
Explanation:
The use of an automated password management tool is a preventive control measure. The software would prevent repetition (semantic) and would enforce syntactic rules, thus making the passwords robust. It would also provide a method for ensuring frequent changes and would prevent the same user from reusing their old password for a designated period of time. Choices A, B and D do not enforce compliance.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 413

The business case for an IS project has changed during the course of the project due to new requirements being added. What should be done NEXT?

A.The project should go through the formal reapproval process.
B.The changes to the business case should be documented in the project plan.
C.Additional resources should be allocated to the project due to the new requirements.
D.Project stakeholders should be notified of the changes.

Correct Answer: D

Section: Protection of Information Assets

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 414

.Parity bits are a control used to validate:

A.Data authentication
B.Data completeness
C.Data source
D.Data accuracy

Correct Answer: B

Parity bits are a control used to validate data completeness.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 415

The MAJOR advantage of the risk assessment approach over the baseline approach to information
security management is that it ensures:

A.information assets are overprotected.
B.a basic level of protection is applied regardless of asset value.
C.appropriate levels of protection are applied to information assets.
D.an equal proportion of resources are devoted to protecting all information assets.

Correct Answer: C

Section: Protection of Information Assets
Explanation:
Full risk assessment determines the level of protection most appropriate to a given level of risk, while the
baseline approach merely applies a standard set of protection regardless of risk. There is a cost advantage
in not overprotecting information. However, an even bigger advantage is making sure that no information
assets are over- or under protected. The risk assessment approach will ensure an appropriate level of
protection is applied, commensurate with the level of risk and asset value and, therefore, considering asset
value. The baseline approach does not allow more resources to be directed toward the assets at greater
risk, rather than equally directing resources to all assets.

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
79
80
81
82
83
84
85
86
87
88
…
»
»»

[×]

Download PDF File

Enter your email address to download ISACA.CISA.v2023-03-04.q546 Dumps

Email:

Our website provides the Largest and the most Latest vendors Certification Exam materials around the world.

Using dumps we provide to Pass the Exam, we has the Valid Dumps with passing guranteed just which you need.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 FreeQAs

www.freeqas.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics Made Easy - Statcounter