Online Access Free CISA Practice Test

Secure code reviews as part of a continuous deployment program are which type of control?

• A.Logical
• B.Preventive
• C.Corrective
• D.Detective

An incident response team has been notified of a virus outbreak in a network subnet. Which of the following should be the NEXT step?

• A.Focus on limiting the damage.
• B.Verify that the compromised systems are fully functional.
• C.Remove and restore the affected systems.
• D.Document the incident.

Who should be the FIRST to evaluate an audit report prior to issuing it to the project steering committee?

• A.IS audit manager
• B.Audit committee
• C.Project sponsor
• D.Business owner

When designing metrics for information security, the MOST important consideration is that the metrics:

• A.conform to industry standards.
• B.provide actionable data.
• C.apply to all business units.
• D.are easy to understand.

An organization is implementing a data loss prevention (DLP) system in response to a new regulatory requirement Reviewing. which of the following would be MOST helpful in evaluating the system ' s design?

• A.Historical record of data breaches
• B.System manuals
• C.Enterprise architecture (EA)
• D.Industry trends