Selected CISA Isaca Certification Questions Answers

Certified Information Systems Auditor Questions and Answers

Question 189

Which type of testing is used to identify security vulnerabilities in source code in the development environment?

Options:

Interactive application security testing (IAST)

Runtime application self-protection (RASP)

Dynamic analysis security testing (DAST)

Static analysis security testing (SAST)

Question 190

Which of the following is the BEST way to mitigate risk to an organization's network associated with devices permitted under a bring your own device (BYOD) policy?

Options:

Require personal devices to be reviewed by IT staff.

Enable port security on all network switches.

Implement a network access control system.

Ensure the policy requires antivirus software on devices.

Question 191

An organization is enhancing the security of a client-facing web application following a proposal to acquire personal information for a business purpose. Which of the following is MOST important to review before implementing this initiative?

Options:

Regulatory compliance requirements

Data ownership assignments

Encryption capabilities

Customer notification procedures

Question 192

During a closing meeting, the IT manager disagrees with a valid audit finding presented by the IS auditor and requests the finding be excluded from the final report. Which of the following is the auditor's BEST course of action?

Options:

Request that the IT manager be removed from the remaining meetings and future audits.

Modify the finding to include the IT manager's comments and inform the audit manager of the changes.

Remove the finding from the report and continue presenting the remaining findings.

Provide the evidence which supports the finding and keep the finding in the report.

Month End Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Selected CISA Isaca Certification Questions Answers

Certified Information Systems Auditor Questions and Answers

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce