Free Access ISACA.CISA.v2021-10-08.q198 Practice Test (Page 32)

Question 151

Which of the following is the BEST way to mitigate the risk associated with a document storage application that has a syncing feature that could allow malware to spread to other machines in the network?

A.An audit should be conducted to detect shadow data and shadow IT in the network.

B.Content inspection technologies should be used to scan files for sensitive data.

C.All files should be scanned when they are uploaded to and downloaded from the application.

D.User behavior modeling and analysis should be performed to discover anomalies in user behavior.

Question 152

Which of the following is the MOST effective control for protecting the confidentiality and integrity of data stored unencrypted on virtual machines?

A.Limit creation of virtual machine images and snapshots

B.Monitor access To stored images and snapshots of virtual machines

C.Restrict access to images and snapshots of virtual machines

D.Review logical access controls on virtual machines regularly

Question 153

An IS audit reveals that many of an organization's Internet of Things (loT) devices have not been patched.
Which of the following should the auditor do FIRST when determining why these devices have not received the required patches?

A.Determine the physical location of the deployed devices

B.Review the organization's patching policy and process documentation

C.Ensure the devices are listed in the asset inventory database

D.Review the organization's most recent risk assessment on loT devices

Question 154

An IS auditor is reviewing a network diagram. Which of the following would be the BEST location for placement of a firewall?

A.Between virtual local area networks (VLANs)

B.At borders of network segments with different security levels

C.Inside the demilitarized zone (DMZ)

D.Between each host and the local network switch/hub

Question 155

Which of the following group is MOST likely responsible for the implementation of IT projects?

A.IT compliance committee

B.IT strategy committee

C.IT steering committee

D.IT governance committee

Other Version: 4532ISACA.CISA.v2025-05-24.q773; 1590ISACA.CISA.v2024-10-22.q310; 4136ISACA.CISA.v2023-10-02.q715; 3737ISACA.CISA.v2023-03-29.q119; 2383ISACA.CISA.v2023-02-09.q181; 1498ISACA.CISA.v2023-02-06.q107; 3050ISACA.CISA.v2022-08-28.q129; 4218ISACA.CISA.v2022-02-25.q148; 126ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 5623ISACA.CISA.v2021-11-11.q194; 9785ISACA.CISA.v2021-09-28.q199; 12249ISACA.CISA.v2021-09-11.q201

Latest Upload: 102OCEG.GRCP.v2025-09-11.q211; 102HP.HPE0-V27.v2025-09-11.q78; 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 222CFAInstitute.ESG-Investing.v2025-09-08.q173; 157PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 147Salesforce.Data-Architect.v2025-09-05.q216; 141Adobe.AD0-E605.v2025-09-05.q50

Question 151

Question 152

Question 153

Question 154

Question 155

Download PDF File