Authentic CISA Dumps - Free PDF Questions to Pass
Guaranteed Accomplishment with Newest Oct-2023 FREE CISA
What Are Details of CISA Certification Exam?
All certification tests developed by ISACA have a standard structure. They include 150 questions that have a multiple-choice format. Candidates will have 240 minutes to answer as many questions as possible correctly. The exam fees are different and based on the applicants' membership. For instance, an ISACA member will pay $575 to register for the CISA exam. In case they are non-members, the registration fee becomes $760. It is essential to mention that all exam fees are non-refundable. To know more, this exam is available in different languages. Thus, examinees can take it in Chinese Traditional or Simplified, German, English, French, Italian, Japanese, Italian, Korean, Spanish, and Turkish. Before registering for the CISA, candidates need to know that this test is computer-based and is administered by PSI testing centers anywhere in the world. The registration process is continuous, which allows candidates to register without restrictions anytime. Also, the vendor recommends that applicants should schedule a testing appointment 48 hours after the candidate finalized the registration process. Once the registration is complete, exam-takers can take their test within one year after they register. Besides, an important step that examinees shouldn't forget is checking which is the nearest PSI test site to their home place.
NEW QUESTION # 102
Default permit is only a good approach in an environment where:
- A. security threats are non-existent or negligible.
- B. users are trained.
- C. security threats are serious and severe.
- D. None of the choices.
- E. security threats are non-negligible.
Answer: A
Explanation:
"Everything not explicitly permitted is forbidden (default deny) improves security at a cost in functionality. This is a good approach if you have lots of security threats. On the other hand., ""Everything not explicitly forbidden is permitted"" (default permit) allows greater functionality by sacrificing security. This is only a good approach in an environment where security threats are non- existent or negligible."
NEW QUESTION # 103
Which of the following is the BEST way to help ensure that products developed in an agile software development environment meet the required quality standards?
- A. Focus tests on mandated regulatory requirements
- B. Implement automated testing of code
- C. Review test scripts approved by product owners
- D. Perform unit testing the end of the development
Answer: C
NEW QUESTION # 104
Disaster recovery planning for network connectivity to a hot site over a public-switched network would be
MOST likely to include:
- A. minimizing the number of points of presence
- B. reciprocal agreements with customers of that network
- C. redirecting private virtual circuits
- D. contracts for acquiring new leased lines
Answer: C
Explanation:
Section: Protection of Information Assets
NEW QUESTION # 105
In which of the following WAN message transmission technique messages are divided into packets before they are sent and each packet is then transmitted individually and can even follow different routes to its destination?
- A. Packet switching
- B. Circuit switching
- C. Virtual Circuits
- D. Message Switching
Answer: A
Explanation:
Explanation/Reference:
For your exam you should know below information about WAN message transmission technique:
Message Switching
Message switching is a network switching technique in which data is routed in its entirety from the source node to the destination node, one hope at a time. During message routing, every intermediate switch in the network stores the whole message. If the entire network's resources are engaged or the network becomes blocked, the message-switched network stores and delays the message until ample resources become available for effective transmission of the message.
Message Switching
Image from: http://ecomputernotes.com/images/Message-Switched-data-Network.jpg Packet Switching Refers to protocols in which messages are divided into packets before they are sent. Each packet is then transmitted individually and can even follow different routes to its destination. Once all the packets forming a message arrive at the destination, they are recompiled into the original message.
Packet Switching
Image from: http://upload.wikimedia.org/wikipedia/commons/f/f6/Packet_Switching.gif Circuit Switching Circuit switching is a methodology of implementing a telecommunications network in which two network nodes establish a dedicated communications channel (circuit) through the network before the nodes may communicate.
The circuit guarantees the full bandwidth of the channel and remains connected for the duration of the session. The circuit functions as if the nodes were physically connected similar to an electrical circuit.
The defining example of a circuit-switched network is the early analog telephone network. When a call is made from one telephone to another, switches within the telephone exchanges create a continuous wire circuit between the two telephones, for as long as the call lasts.
In circuit switching, the bit delay is constant during a connection, as opposed to packet switching, where packet queues may cause varying and potentially indefinitely long packet transfer delays. No circuit can be degraded by competing users because it is protected from use by other callers until the circuit is released and a new connection is set up. Even if no actual communication is taking place, the channel remains reserved and protected from competing users.
Circuit Switching
Image from: http://www.louiewong.com/wp-content/uploads/2010/09/Circuit_Switching.jpg See a table below comparing Circuit Switched versus Packet Switched networks:
Difference between Circuit and packet switching
Image from:http://www.hardware-one.com/reviews/network-guide-2/images/packet-vs-circuit.gif Virtual circuit In telecommunications and computer networks, a virtual circuit (VC), synonymous with virtual connection and virtual channel, is a connection oriented communication service that is delivered by means of packet mode communication.
After a connection or virtual circuit is established between two nodes or application processes, a bit stream or byte stream may be delivered between the nodes; a virtual circuit protocol allows higher level protocols to avoid dealing with the division of data into segments, packets, or frames.
Virtual circuit communication resembles circuit switching, since both are connection oriented, meaning that in both cases data is delivered in correct order, and signaling overhead is required during a connection establishment phase. However, circuit switching provides constant bit rate and latency, while these may vary in a virtual circuit service due to factors such as:
varying packet queue lengths in the network nodes,
varying bit rate generated by the application,
varying load from other users sharing the same network resources by means of statistical multiplexing, etc.
The following were incorrect answers:
The other options presented are not valid choices.
The following reference(s) were/was used to create this question:
CISA review manual 2014 Page number 265
NEW QUESTION # 106
An organization is acquiring a new customer relationship management (CRM) system In which of the following would the IS auditor find the MOST relevant information on projected cost savings?
- A. Results of prototype testing
- B. Feasibility study document
- C. Business case
- D. Request for proposal (RFP)
Answer: C
NEW QUESTION # 107
To determine if unauthorized changes have been made to production code the BEST audit procedure is to:
- A. examine the change control system records and trace them forward to object code files.
- B. review change approved designations established within the change control system.
- C. examine object code to find instances of changes and trace them back to change control records.
- D. review access control permissions operating within the production program libraries.
Answer: C
Explanation:
The procedure of examining object code files to establish instances of code changes and tracing these back to change control system records is a substantive test that directly addresses the risk of unauthorized code changes. The other choices are valid procedures to apply in a change control audit but they do not directly address the risk of unauthorized code changes.
NEW QUESTION # 108
Which of the following type of a computer network are variation of LAN and are dedicated to connecting
storage devices to servers and other computing devices?
- A. LAN
- B. PAN
- C. MAN
- D. SAN
Answer: D
Explanation:
Section: Information System Operations, Maintenance and Support
Explanation/Reference:
A storage area network (SAN) is a dedicated network that provides access to consolidated, block level data
storage. SANs are primarily used to enhance storage devices, such as disk arrays, tape libraries, and
optical jukeboxes, accessible to servers so that the devices appear like locally attached devices to the
operating system. A SAN typically has its own network of storage devices that are generally not accessible
through the local area network (LAN) by other devices.
For your exam you should know below information about computer networks:
Local Area Network (LAN)
A local area network (LAN) is a computer network that interconnects computers within a limited area such
as a home, school, computer laboratory, or office building using network media.
Local Area Network
Wide Area Network
A wide area network (WAN) is a network that covers a broad area (i.e., any telecommunications network
that links across metropolitan, regional, national or international boundaries) using leased
telecommunication lines.
Wide Area Network
Metropolitan Area Network
A metropolitan area network (MAN) is a computer network in which two or more computers or
communicating devices or networks which are geographically separated but in same metropolitan city and
are connected to each other are said to be connected on MAN. Metropolitan limits are determined by local
municipal corporations; the larger the city, the bigger the MAN, the smaller a metro city, smaller the MAN
Metropolitan Area Network
Personal Area Network
A personal area network (PAN) is a computer network used for data transmission among devices such as
computers, telephones and personal digital assistants. PANs can be used for communication among the
personal devices themselves (intrapersonal communication), or for connecting to a higher level network
and the Internet (an uplink).
Personal Area Network
Storage Area Network
A storage area network (SAN) is a dedicated network that provides access to consolidated, block level data
storage. SANs are primarily used to enhance storage devices, such as disk arrays, tape libraries, and
optical jukeboxes, accessible to servers so that the devices appear like locally attached devices to the
operating system. A SAN typically has its own network of storage devices that are generally not accessible
through the local area network (LAN) by other devices.
Storage Area Network
The following were incorrect answers:
PAN - A personal area network (PAN) is a computer network used for data transmission among devices
such as computers, telephones and personal digital assistants. PANs can be used for communication
among the personal devices themselves (intrapersonal communication), or for connecting to a higher level
network and the Internet (an uplink).
LAN - A local area network (LAN) is a computer network that interconnects computers within a limited area
such as a home, school, computer laboratory, or office building using network media.
MAN - A metropolitan area network (MAN) is a computer network in which two or more computers or
communicating devices or networks which are geographically separated but in same metropolitan city and
are connected to each other are said to be connected on MAN. Metropolitan limits are determined by local
municipal corporations; the larger the city, the bigger the MAN, the smaller a metro city, smaller the MAN
The following reference(s) were/was used to create this question:
CISA review manual 2014 Page number 258
NEW QUESTION # 109
Which of the following controls should be implemented to BEST minimize system downtime for maintenance?
- A. Clustering
- B. Nightly full backups
- C. Virtualization
- D. Warm site
Answer: A
NEW QUESTION # 110
To restore service at a large processing facility after a disaster, which of the following tasks should be
performed FIRST?
- A. Activate the reciprocal agreement.
- B. Contact equipment vendors.
- C. Launch the emergency action team.
- D. Inform insurance company agents.
Answer: C
Explanation:
Section: Protection of Information Assets
NEW QUESTION # 111
Which of the following could provide an organization with the fastest resumption of processing following a disk failure?
- A. Replication
- B. Server load balancing
- C. Open database connectivity (ODBC) of the backup server
- D. Mirroring
Answer: D
Explanation:
Section: Information System Operations, Maintenance and Support
NEW QUESTION # 112
An integrated test facility is considered a useful audit tool because it:
- A. provides the IS auditor with a tool to analyze a large range of information
- B. compares processing output with independently calculated data.
- C. enables the financial and IS auditors to integrate their audit tests.
- D. is a cost-efficient approach to auditing application controls.
Answer: B
Explanation:
Section: Protection of Information Assets
Explanation:
An integrated test facility is considered a useful audit tool because it uses the same programs to compare
processing using independently calculated data. This involves setting up dummy entities on an application
system and processing test or production data against the entity as a means of verifying processing
accuracy.
NEW QUESTION # 113
Which of the following observations should be of concern to an IS auditor performing a review of an organization's IT governance structure?
- A. The chief risk officer is also the chief information officer.
- B. The chief information officer is prohibited from making capital decisions regarding IT.
- C. There are no IT subject matter expects on the board of directors.
D18912E1457D5D1DDCBD40AB3BF70D5D - D. The IT steering committee has oversight of the IT budget.
Answer: A
NEW QUESTION # 114
Which of the following should be of PRIMARY concern to an IS auditor reviewing the management of external IT service providers?
- A. Determining if the services were provided as contracted
- B. Minimizing costs for the services provided
- C. Evaluating the process for transferring knowledge to the IT department
- D. Prohibiting the provider from subcontracting services
Answer: A
Explanation:
From an IS auditor's perspective, the primary objective of auditing the management of service providers should be to determine if the services that were requested were provided in a way that is acceptable, seamless and in line with contractual agreements. Minimizing costs, if applicable and achievable (depending on the customer's need) is traditionally not part of an IS auditor's job. This would normally be done by a line management function within the IT department. Furthermore, during an audit, it is too late to minimize the costs for existing provider arrangements. Subcontracting providers could be a concern, but it would not be the primary concern. Transferring knowledge to the internal IT department might be desirable under certain circumstances, but should not be the primary concern of an IS auditor when auditing IT service providers and the management thereof.
NEW QUESTION # 115
..risk that the IS auditor will not find an error that has occurred is identified by which of the following terms?
- A. Control
- B. Inherent
- C. Detection
- D. Prevention
Answer: C
NEW QUESTION # 116
What are intrusion-detection systems (IDS) primarily used for?
- A. To identify intrusion attempts to a network
- B. Forensic incident response
- C. To identify AND prevent intrusion attempts to a network
- D. To prevent intrusion attempts to a network
Answer: A
Explanation:
Explanation/Reference:
Intrusion-detection systems (IDS) are used to identify intrusion attempts on a network.
NEW QUESTION # 117
A reduction in which of the following would indicate improved performance in the administration of information security?
- A. Systems subject to an intrusion detection process
- B. IT security awareness training days
- C. Turnaround time for requests for new user access
- D. Number of staff involved in security administration
Answer: A
Explanation:
Section: Information System Operations, Maintenance and Support
NEW QUESTION # 118
An IS auditor finds an organization is unable to effectively review the activity logs for an accounts receivable application due to the large amount of activity recorded. When of the following is the auditor's BEST recommendation?
- A. Hire additional staff to review logs.
- B. Encrypt the activity logs
- C. Utilize business intelligence.
- D. Limit accounts receivable transactions.
Answer: C
NEW QUESTION # 119
Which of the following would BEST enable effective IT resource management?
- A. Establishing business priorities
- B. Assessing the risk associated with IT resources
- C. Automating business processes
- D. Outsourcing IT processes and activities
Answer: A
NEW QUESTION # 120
When protecting an organization's IT systems, which of the following is normally the next
line of defense after the network firewall has been compromised?
- A. Antivirus programs
- B. Personal firewall
- C. Virtual local area network (VLAN) configuration
- D. Intrusion detection system (IDS)
Answer: D
Explanation:
An intrusion detection system (IDS) would be the next line of defense after the firewall. It would detect anomalies in the network/server activity and try to detect the perpetrator. Antivirus programs, personal firewalls and VI_AN configurations would be later in the line of defense.
NEW QUESTION # 121
Which of the following term related to network performance refers to the actual rate that information is transferred over a network?
- A. Throughput
- B. Jitter
- C. Latency
- D. Bandwidth
Answer: A
Explanation:
Explanation/Reference:
Throughput the actual rate that information is transferred. In data transmission, throughput is the amount of data moved successfully from one place to another in a given time period.
For your exam you should know below information about Network performance:
Network performance refers to measurement of service quality of a telecommunications product as seen by the customer.
The following list gives examples of network performance measures for a circuit-switched network and one type of packet-switched network (ATM):
Circuit-switched networks: In circuit switched networks, network performance is synonymous with the grade of service. The number of rejected calls is a measure of how well the network is performing under heavy traffic loads. Other types of performance measures can include noise, echo and so on.
ATM: In an Asynchronous Transfer Mode (ATM) network, performance can be measured by line rate, quality of service (QoS), data throughput, connect time, stability, technology, modulation technique and modem enhancements.
There are many different ways to measure the performance of a network, as each network is different in nature and design. Performance can also be modeled instead of measured; one example of this is using state transition diagrams to model queuing performance in a circuit-switched network. These diagrams allow the network planner to analyze how the network will perform in each state, ensuring that the network will be optimally designed.
The following measures are often considered important:
Bandwidth - Bandwidth is commonly measured in bits/second is the maximum rate that information can be transferred Throughput - Throughput is the actual rate that information is transferred Latency - Latency is the delay between the sender and the receiver decoding it, this is mainly a function of the signals travel time, and processing time at any nodes the information traverses Jitter - Jitter is the variation in the time of arrival at the receiver of the information Error Rate - Error rate is the number of corrupted bits expressed as a percentage or fraction of the total sen The following answers are incorrect:
Bandwidth - Bandwidth is commonly measured in bits/second is the maximum rate that information can be transferred Latency - Latency is the delay between the sender and the receiver decoding it, this is mainly a function of the signals travel time, and processing time at any nodes the information traverses Jitter - Jitter is the variation in the time of arrival at the receiver of the information The following reference(s) were/was used to create this question:
CISA review manual 2014 page number 275
NEW QUESTION # 122
In an environment that automatically reports all program changes. which of the following is the MOST efficient way to detect unauthorized changes to production programs?
- A. Verifying user management approval of modifications
- B. Reviewing the last compile date of production programs
- C. Periodically running and reviewing test data against production programs
- D. Manually comparing code in production programs to controlled copies
Answer: C
NEW QUESTION # 123
Which of the following type of honey pot essentially gives a hacker a real environment to attack?
- A. None of the choices
- B. High-interaction
- C. Med-interaction
- D. Low-interaction
Answer: B
Explanation:
Explanation/Reference:
The answer:http://www.ce-infosys.com/english/free_compusec/free_compusec.aspx High-interaction type of honey pot essentially gives an attacker a real environment to attack.
Also, you should know below information about honey pot for CISA exam:
A Honey pot is a software application that pretends to be an unfortunate server on the internet and is not set up actively protect against break-ins.
There are two types of honey pot:
High-interaction Honey pots - Essentially gives hacker a real environment to attack. High-interaction honey pots imitate the activities of the production systems that host a variety of services and, therefore, an attacker may be allowed a lot of services to waste his time. According to recent research into high- interaction honey pot technology, by employing virtual machines, multiple honey pots can be hosted on a single physical machine. Therefore, even if the honey pot is compromised, it can be restored more quickly.
In general, high-interaction honey pots provide more security by being difficult to detect, but they are highly expensive to maintain. If virtual machines are not available, one honey pot must be maintained for each physical computer, which can be exorbitantly expensive. Example: Honey net.
Low interaction - Emulate production environment and therefore, provide more limited information. Low- interaction honey pots simulate only the services frequently requested by attackers. Since they consume relatively few resources, multiple virtual machines can easily be hosted on one physical system, the virtual systems have a short response time, and less code is required, reducing the complexity of the virtual system's security. Example: Honeyed.
The following were incorrect answers:
Med-interaction - Not a real type of honey pot
The following reference(s) were/was used to create this question:
CISA review manual 2014 Page number 348
http://en.wikipedia.org/wiki/Honeypot_%28computing%29
NEW QUESTION # 124
The MOST significant reason for using key performance indicators (KPIs) to track the progress of IT projects against initial targets is that they:
- A. identify which projects may require additional funding
- B. identify instances where increased stakeholder engagement is required
- C. provide timely indication of when corrective actions need to be taken
- D. influence management decisions to outsource IT projects
Answer: B
Explanation:
Section: Information System Acquisition, Development and Implementation
NEW QUESTION # 125
......
CISA Braindumps PDF, ISACA CISA Exam Cram: https://www.examcost.com/CISA-practice-exam.html
Use Valid New Free CISA Exam Dumps & Answers: https://drive.google.com/open?id=1M-4UqhlF0WOkIcGlmuLn3IFOG5OWP8oR
