Free Access ISACA.CISA.v2023-02-09.q181 Practice Test (Page 36)

Question 171

Which of the following is MOST appropriate to prevent unauthorized retrieval of confidential information stored in a business application system?

A.Apply single sign-on for access control

B.Enforce an internal data access policy.

C.Enforce the use of digital signatures.

D.Implement segregation of duties.

Question 172

An accounting department uses a spreadsheet to calculate sensitive financial transactions. Which of the following is the MOST important control for maintaining the security of data in the spreadsheet?

A.There Is a reconciliation process between the spreadsheet and the finance system

B.A separate copy of the spreadsheet is routinely backed up

C.The spreadsheet is locked down to avoid inadvertent changes

D.Access to the spreadsheet is given only to those who require access

Question 173

What is the BEST control to address SQL injection vulnerabilities?

A.Unicode translation

B.Digital signatures

C.Secure Sockets Layer (SSL) encryption

D.Input validation

Question 174

Which of the following is the BEST detective control for a job scheduling process involving data transmission?

A.Jobs are scheduled and a log of this activity is retained for subsequent review.

B.Metrics denoting the volume of monthly job failures are reported and reviewed by senior management.

C.Job failure alerts are automatically generated and routed to support personnel.

D.Jobs are scheduled to be completed daily and data is transmitted using a Secure File Transfer Protocol (SFTP).

Question 175

During an IT governance audit, an IS auditor notes that IT policies and procedures are not regularly reviewed and updated. The GREATEST concern to the IS auditor is that policies and procedures might not:

A.include new systems and corresponding process changes.

B.incorporate changes to relevant laws.

C.be subject to adequate quality assurance (QA).

D.reflect current practices.

Other Version: 4605ISACA.CISA.v2025-05-24.q773; 1634ISACA.CISA.v2024-10-22.q310; 4136ISACA.CISA.v2023-10-02.q715; 3740ISACA.CISA.v2023-03-29.q119; 1498ISACA.CISA.v2023-02-06.q107; 3051ISACA.CISA.v2022-08-28.q129; 4218ISACA.CISA.v2022-02-25.q148; 126ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 5623ISACA.CISA.v2021-11-11.q194; 8827ISACA.CISA.v2021-10-08.q198; 9801ISACA.CISA.v2021-09-28.q199; 12255ISACA.CISA.v2021-09-11.q201

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 105HP.HPE0-V27.v2025-09-11.q78; 120Oracle.1Z0-1057-23.v2025-09-10.q47; 156Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 171TheSecOpsGroup.CNSP.v2025-09-08.q20; 237CFAInstitute.ESG-Investing.v2025-09-08.q173; 220PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 155Salesforce.Data-Architect.v2025-09-05.q216; 149Adobe.AD0-E605.v2025-09-05.q50

Question 171

Question 172

Question 173

Question 174

Question 175

Download PDF File