CISA Practice Questions with Answers 100% Solved

CISA Practice Questions with
Answers 100% Solved
InMaMpublicMkeyMinfrastructureM(PKI),MwhichMofMtheMfollowingMmayMbeMreliedMupon
MtoMproveMthatManMonlineMtransactionMwasMauthorizedMbyMaMspecificMcustomer?


CorrectMA.MNonrepudiation

M
MB.MEncryption
M
MC.MAuthentication
M
MD.MIntegrity
M
.M-MAnswerMYouMareMcorrect,MtheManswerMisMA.M




A.MNonrepudiation,MachievedMthroughMtheMuseMofMdigitalMsignatures,MpreventsMtheMs
endersMfromMlaterMdenyingMthatMtheyMgeneratedMandMsentMtheMmessage.



B.MEncryptionMmayMprotectMtheMdataMtransmittedMoverMtheMInternet,MbutMmayMnot
MproveMthatMtheMtransactionsMwereMmade.


C.MAuthenticationMisMnecessaryMtoMestablishMtheMidentificationMofMallMpartiesMtoMaM
communication.



D.MIntegrityMensuresMthatMtransactionsMareMaccurateMbutMdoesMnotMprovideMtheMide
ntificationMofMtheMcustomer



WhichMofMtheMfollowingMBESTMensuresMtheMintegrityMofMaMserver'sMoperatingMsystem
M(OS)?

,MA.MProtectingMtheMserverMinMaMsecureMlocation
M
MB.MSettingMaMbootMpassword
M
CorrectMC.MHardeningMtheMserverMconfiguration

M
MD.MImplementingMactivityMloggingM-MAnswerMYouMareMcorrect,MtheManswerMisMC.M




A.MProtectingMtheMserverMinMaMsecureMlocationMisMaMgoodMpractice,MbutMdoesMnot
MensureMthatMaMuserMwillMnotMtryMtoMexploitMlogicalMvulnerabilitiesMandMcompromis
eMtheMoperatingMsystemM(OS).



B.MSettingMaMbootMpasswordMisMaMgoodMpractice,MbutMdoesMnotMensureMthatMaMu
serMwillMnotMtryMtoMexploitMlogicalMvulnerabilitiesMandMcompromiseMtheMOS.



C.MHardeningMaMsystemMmeansMtoMconfigureMitMinMtheMmostMsecureMmannerM(instal
lMlatestMsecurityMpatches,MproperlyMdefineMaccessMauthorizationMforMusersMandMadmin
istrators,MdisableMinsecureMoptionsMandMuninstallMunusedMservices)MtoMpreventMnonpri
vilegedMusersMfromMgainingMtheMrightMtoMexecuteMprivilegedMinstructionsMand,Mthus,
MtakeMcontrolMofMtheMentireMmachine,MjeopardizingMtheMintegrityMofMtheMOS.


D.MActivityMloggingMhasMtwoMweaknessesMinMthisMscenario—
itMisMaMdetectiveMcontrolM(notMaMpreventiveMone),MandMtheMattackerMwhoMalready
MgainedMprivilegedMaccessMcanMmodifyMlogsMorMdisableMthem.


TheMISMauditorMisMreviewingManMorganization'sMhumanMresourcesM(HR)MdatabaseMimpl
ementation.MTheMISMauditorMdiscoversMthatMtheMdatabaseMserversMareMclusteredMfor
MhighMavailability,MallMdefaultMdatabaseMaccountsMhaveMbeenMremovedMandMdatabase
MauditMlogsMareMkeptMandMreviewedMonMaMweeklyMbasis.MWhatMotherMareaMshould
MtheMISMauditorMcheckMtoMensureMthatMtheMdatabasesMareMappropriatelyMsecured?


MA.MDatabaseMdigitalMsignatures
M

,IncorrectMB.MDatabaseMencryptionMnoncesMandMotherMvariables

M
MC.MDatabaseMmediaMaccessMcontrolM(MAC)MaddressMauthentication
M
MD.MDatabaseMinitializationMparametersM-
MAnswerMYouMansweredMB.MTheMcorrectManswerMisMD.M




A.MDigitalMsignaturesMareMusedMforMauthenticationMandMnonrepudiation,MandMareMnot
McommonlyMusedMinMdatabases.MAsMaMresult,MthisMisMnotManMareaMinMwhichMthe
MISMauditorMshouldMinvestigate.


B.MAMnonceMisMdefinedMasMaM"parameterMthatMchangesMoverMtime"MandMisMsimilar
MtoMaMnumberMgeneratedMtoMauthenticateMoneMspecificMuserMsession.MNoncesMareM
notMrelatedMtoMdatabaseMsecurityM(theyMareMcommonlyMusedMinMencryptionMschemes)
.



C.MAMmediaMaccessMcontrolM(MAC)MaddressMisMtheMhardwareMaddressMofMaMnetwor
kMinterface.MMACMaddressMauthenticationMisMsometimesMusedMwithMwirelessMlocalMar
eaMnetworkM(WLAN)Mtechnology,MbutMisMnotMrelatedMtoMdatabaseMsecurity.



D.MWhenMaMdatabaseMisMopened,MmanyMofMitsMconfigurationMoptionsMareMgoverned
MbyMinitializationMparameters.MTheseMparametersMareMusuallyMgovernedMbyMaMfileM("i
nit.ora"MinMtheMcaseMofMOracleMDBMS),MwhichMcontainsMmanyMsettings.MTheMsystem
MinitializationMparametersMaddressMmanyM"global"MdatabaseMsettings,MincludingMauthenti
cation,MremoteMaccessMandMotherMcriticalMsecurityMareas.MToMeffectivelyMauditMaMdat
abaseMimplementation,MtheMISMauditorMmustMexamineMtheMdatabaseMinitializationMpara
meters.



WhichMofMtheMfollowingMprocessesMwillMbeMMOSTMeffectiveMinMreducingMtheMriskMt
hatMunauthorizedMsoftwareMonMaMbackupMserverMisMdistributedMtoMtheMproductionMs
erver?



MA.MManuallyMcopyMfilesMtoMaccomplishMreplication.
M

, MB.MReviewMchangesMinMtheMsoftwareMversionMcontrolMsystem.
M
IncorrectMC.MEnsureMthatMdevelopersMdoMnotMhaveMaccessMtoMtheMbackupMserver.

M
MD.MReviewMtheMaccessMcontrolMlogMofMtheMbackupMserver.M-
MAnswerMYouMansweredMC.MTheMcorrectManswerMisMB.M




A.MEvenMifMreplicationMisMbeMconductedMmanuallyMwithMdueMcare,MthereMstillMremai
nsMaMriskMtoMcopyingMunauthorizedMsoftwareMfromMoneMserverMtoManother.



B.MItMisMcommonMpracticeMforMsoftwareMchangesMtoMbeMtrackedMandMcontrolledMusi
ngMversionMcontrolMsoftware.MAnMISMauditorMshouldMreviewMreportsMorMlogsMfromMt
hisMsystemMtoMidentifyMtheMsoftwareMthatMisMpromotedMtoMproduction.MOnlyMmoving
MtheMversionsMonMtheMversionMcontrolMsystemM(VCS)MprogramMwillMpreventMtheMtra
nsferMofMdevelopmentMorMearlierMversions.



C.MIfMunauthorizedMcodeMwasMintroducedMontoMtheMbackupMserverMbyMdevelopers,Mc
ontrolsMonMtheMproductionMserverMandMtheMsoftwareMversionMcontrolMsystemMshould
MmitigateMthisMrisk.


D.MReviewMofMtheMaccessMlogMwillMidentifyMstaffMaccessMorMtheMoperationsMperform
ed;Mhowever,MitMmayMnotMprovideMenoughMinformationMtoMdetectMtheMreleaseMofM
unauthorizedMsoftware.



AMconsultingMfirmMhasMcreatedMaMFileMTransferMProtocolM(FTP)MsiteMforMtheMpurpos
eMofMreceivingMfinancialMdataMandMhasMcommunicatedMtheMsite'sMaddress,MuserMIDM
andMpasswordMtoMtheMfinancialMservicesMcompanyMinMseparateMemailMmessages.MThe
McompanyMisMtoMtransmitMitsMdataMtoMtheMFTPMsiteMafterMmanuallyMencryptingMthe
Mdata.MTheMISMauditor'sMGREATESTMconcernMwithMthisMprocessMisMthat:


CorrectMA.MtheMusersMmayMnotMrememberMtoMmanuallyMencryptMtheMdataMbeforeMt
ransmission.

M
MB.MtheMsiteMcredentialsMwereMsentMtoMtheMfinancialMservicesMcompanyMviaMemail.