| Other CISA Certification Interview Questions |
| |
| Question | Asked @ | Answers |
| |
| The technique used to ensure security in virtual private
networks (VPNs) is:
A. encapsulation.
B. wrapping.
C. transform.
D. encryption. | | 1 |
| Which of the following would an IS auditor consider to be
the MOST helpful when evaluating the effectiveness and
adequacy of a computer preventive maintenance program?
A. A system downtime log
B. Vendors' reliability figures
C. Regularly scheduled maintenance log
D. A written preventive maintenance schedule | | 1 |
| Which of the following is a practice that should be
incorporated into the plan for testing disaster recovery
procedures?
A. Invite client participation.
B. Involve all technical staff.
C. Rotate recovery managers.
D. Install locally stored backup. | Microsoft | 3 |
| During a post-implementation review of an enterprise
resource management system, an IS auditor would MOST likely:
A. review access control configuration.
B. evaluate interface testing.
C. review detailed design documentation.
D. evaluate system testing. | | 1 |
| Which of the following forms of evidence for the auditor
would be considered the MOST reliable?
A. An oral statement from the auditee
B. The results of a test performed by an IS auditor
C. An internally generated computer accounting report
D. A confirmation letter received from an outside source | | 1 |
| In a client-server architecture, a domain name service (DNS)
is MOST important because it provides the:
A. address of the domain server.
B. resolution service for the name/address.
C. IP addresses for the Internet.
D. domain name system. | | 1 |
| The device that connects two networks at the highest level
of the ISO-OSI framework ( i.e., application layer) is a
A. Gateway
B. Router
C. Bridge
D. Brouter | | 1 |
| During a review of a large data center an IS auditor
observed computer operators acting as backup tape librarians
and security administrators. Which of these situations would
be MOST critical to report?
A. Computer operators acting as tape librarians
B. Computer operators acting as security administrators
C. Computer operators acting as a tape librarian and
security administrator
D. It is not necessary to report any of these situations. | | 1 |
| What type of transmission requires modems?
A. Encrypted
B. Digital
C. Analog
D. Modulated | | 1 |
| The objective of IT governance is to ensure that the IT
strategy is aligned with the objectives of (the):
A. enterprise.
B. IT.
C. audit.
D. finance. | | 1 |
| Birth date and marriage date items were switched while
entering data. Which of the following data validation checks
could detect this?
A. Logical relationship
B. Sequence
C. Reasonableness
D. Validity | | 1 |
| When performing an audit of access rights, an IS auditor
should be suspicious of which of the following if allocated
to a computer operator?
A. READ access to data
B. DELETE access to transaction data files
C. Logged READ/EXECUTE access to programs
D. UPDATE access to job control language/script files | | 1 |
| In a system that records all receivables for a company, the
receivables are posted on a daily basis. Which of the
following would ensure that receivables balances are
unaltered between postings?
A. Range checks
B. Record counts
C. Sequence checking
D. Run-to-run control totals | | 1 |
| One of the purposes of library control software is to allow:
A. programmers access to production source and object libraries.
B. batch program updating.
C. operators to update the control library with the
production version before testing is completed.
D. read-only access to source code. | | 1 |
| Which of the following environmental controls is appropriate
to protect computer equipment against short-term reductions
in electrical power?
A. Power line conditioners
B. A surge protective device
C. An alternative power supply
D. An interruptible power supply | | 1 |
| Which of the following data validation edits is effective in
detecting transposition and transcription errors?
A. Range check
B. Check digit
C. Validity check
D. Duplicate check | | 1 |
| An organization is considering connecting a critical
PC-based system to the Internet. Which of the following
would provide the BEST protection against hacking?
A. An application-level gateway
B. A remote access server
C. A proxy server
D. Port scanning | | 1 |
| Which of the following provides the GREATEST assurance of
message authenticity?
A. The pre-hash code is derived mathematically from the
message being sent.
B. The pre-hash code is encrypted using the sender's private
key.
C. Encryption of the pre-hash code and the message using the
secret key.
D. Sender attains the recipient's public key and verifies
the authenticity of its digital certificate with a
certificate authority. | | 1 |
| Which of the following would an IS auditor place LEAST
reliance on when determining management's effectiveness in
communicating information systems policies to appropriate
personnel?
A. Interviews with user and IS personnel
B. Minutes of IS steering committee meetings
C. User department systems and procedures manuals
D.Information processing facilities operations and
procedures manuals | | 1 |
| Which of the following concerns about the security of an
electronic message would be addressed by digital signatures?
A. Unauthorized reading
B. Theft
C. Unauthorized copying
D. Alteration | | 1 |
| |
| For more CISA Certification Interview Questions Click Here |
Ask Questions on ANYTHING, that arise in your Daily Life at 
Site Map