Free Access ISACA.CISA.v2025-05-24.q773 Practice Test (Page 14)

Question 61

Which of the following is the BEST example of a data analytics use case during the planning phase of an IS audite

A.Analyzing user profile data extracted from a directory server to determine the number of admin groups available

B.Analyzing prior year it help desk tickets to determine the overall IT department risk rating

C.Reviewing DevOps procedures to understand how the test and production environment are kept sync.

D.Extracting production data to determine the success rate of payroll software changes

Question 62

Following a breach, what is the BEST source to determine the maximum amount of time before customers must be notified that their personal information may have been compromised?

A.Industry standards

B.Industry regulations

C.Information security policy

D.Incident response plan

Question 63

Which of the following issues identified during a formal review of an organization's information security policies presents the GREATEST potential risk to the organization?

A.The policies are not based on industry best practices for information security.

B.The policies have not been reviewed by the risk management committee.

C.The policies are not aligned with the information security risk appetite.

D.The policies are not available to key risk stakeholders.

Question 64

Which of the following is the BEST way to detect unauthorized copies of licensed software on systems?

A.Implement controls to prohibit downloads of unauthorized software.

B.Conduct periodic software scanning.

C.Perform periodic counting of licenses.

D.Require senior management approval when installing licenses.

Correct Answer: B

The best way to detect unauthorized copies of licensed software on systems is to conduct periodic software scanning. Software scanning is a process of using specialized tools or programs to scan the systems and identify the software installed, the license status, the usage, and the compliance with the software policies and agreements. Software scanning can help to detect any unauthorized, unlicensed, or illegal copies of software on the systems, as well as any discrepancies or violations of the software licenses. Software scanning can also help to optimize the software inventory, reduce the software costs, and improve the security and performance of the systems12.
Some examples of software scanning tools are:
* Microsoft Software Inventory Analyzer (MSIA): A free tool that scans Windows-based computers and servers and generates reports on the Microsoft products installed, such as operating systems, applications, and updates3.
* Belarc Advisor: A free tool that scans Windows-based computers and generates reports on the hardware and software installed, including license keys, versions, usage, and security status4.
* Lansweeper: A paid tool that scans Windows, Linux, Mac, and other network devices and generates reports on the hardware and software inventory, license compliance, configuration, and vulnerabilities5.
To conduct periodic software scanning, you need to:
* Choose a suitable software scanning tool that meets your needs and budget.
* Define the scope and frequency of the software scanning, such as which systems to scan, how often to scan, and what information to collect.
* Configure and run the software scanning tool according to the instructions and settings.
* Review and analyze the software scanning reports and identify any unauthorized copies of licensed
* software on the systems.
* Take appropriate actions to remove or regularize the unauthorized copies of licensed software on the systems.
* Document and report the results and findings of the software scanning.

Question 65

Why is it not preferable for a firewall to treat each network frame or packet in isolation?

A.Such a firewall has no way of knowing if any given packet is part of an existing connection, is trying to establish a new connection, or is just a rogue packet.

B.Such a firewall is costly to setup.

C.Such a firewall is too complicated to maintain.

D.Such a firewall is CPU hungry.

E.Such a firewall offers poor compatibility.

F.None of the choices.

Other Version: 1604ISACA.CISA.v2024-10-22.q310; 4136ISACA.CISA.v2023-10-02.q715; 3738ISACA.CISA.v2023-03-29.q119; 2386ISACA.CISA.v2023-02-09.q181; 1498ISACA.CISA.v2023-02-06.q107; 3051ISACA.CISA.v2022-08-28.q129; 4218ISACA.CISA.v2022-02-25.q148; 126ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 5623ISACA.CISA.v2021-11-11.q194; 8818ISACA.CISA.v2021-10-08.q198; 9791ISACA.CISA.v2021-09-28.q199; 12254ISACA.CISA.v2021-09-11.q201

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 158PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 149Salesforce.Data-Architect.v2025-09-05.q216; 144Adobe.AD0-E605.v2025-09-05.q50

Question 61

Question 62

Question 63

Question 64

Question 65

Download PDF File