CISA 無料問題集「ISACA Certified Information Systems Auditor」

（A）To reduce control costs associated with a specific function

（B）To improve the audit rating process

（C）To shift some control monitoring responsibilities to functional areas

（D）To create cohesive teams through employee involvement

（A）Maintenance patches and the latest enhancement upgrades are missing.

（B）Administrator passwords do not meet organizational security and complexity requirements.

（C）The number of support staff responsible for job scheduling has been reduced.

（D）The scheduling tool was not classified as business-critical by the IT department.

（A）Include the evidence as part of a future audit.

（B）Expand the follow-up scope to include examining the evidence.

（C）Report the risk to management in the follow-up report.

（D）Report only on the areas within the scope of the follow-up.

（A）Hashing in-scope data sets

（B）Encrypting in-scope data sets

（C）Running and comparing the count function within the in-scope data sets

（D）Hosting a digital certificate for in-scope data sets

（A）Data formats have not been standardized across all logs.

（B）Applications are logging events into multiple log files.

（C）Log file size has grown year over year.

（D）Critical events are being logged to immutable log files.

（A）Project change management controls

（B）Existence of an architecture review board

（C）Configuration management

（D）Source code version control

（A）Screening router

（B）Application level gateway

（C）Packet filtering router

（D）Circuit gateway

（A）Hash algorithms

（B）Public key infrastructure (PKI)

（C）Digital signatures

（D）Kerberos

（A）Backup media are not reviewed before disposal.

（B）Degaussing is used instead of physical shredding.

（C）Hardware is not destroyed by a certified vendor.

（D）Backup media are disposed before the end of the retention period

（A）Face recognition

（B）Iris recognition

（C）Retina scanning

（D）Fingerprint scanning

（A）Ensuring that network components are not modified by the client

（B）Establishing a well-designed framework for network servirces.

（C）Reducing the number of entry points into the network

（D）Finding performance metrics that can be measured properly

（A）System event correlation report

（B）Change log

（C）Database log

（D）Security incident and event management (SIEM) report