CISA Exam Preparation Questions &
Answers 100% Correct!!
Completing a Risk Analysis. - ANSWERWhat is the most important consideration
before implementing a new technology?
Indemnity Clause - ANSWERWhat is a clause that holds providers financially liable
for violations?
Agreed upon performance metrics in the SLA - ANSWERWhat is the best reference
for vendor's ability to meet its SLA?
Integrated Test Facility (ITF) - ANSWERWhat creates a fictitious entity in the
database to process test transactions simultaneously with live input
Its advantage is that periodic testing does not require separate test processes.
Careful planning is necessary, and test data must be isolated from production data. -
ANSWERWhat are the advantages of an ITF?
This is undertaken by the development team to determine if the combined units of
software work together and that the software meets user requirements per
specifications. A failure here would be expensive but easier to fix than a failure found
later in the testing process. - ANSWERWhat is system testing and what is the impact
of a test failure like at this phase of testing?
This is the final stage before the software is installed and is available for use. The
greatest impact would occur if the software fails at the acceptance testing level
because this could result in delays and cost overruns. - ANSWERWhat is
Acceptance testing and what is the impact of test failure at this stage?
This examines the units/modules as one integrated system. A failure here would be
expensive and require re-work of the modules but would not be as expensive as a
problem found just prior to implementation. - ANSWERWhat is Integration testing
and what is the impact of test failure at this stage?
unit testing examines the individual units or components of the software. System,
integration and unit testing are all performed by the developers at various stages of
development; the impact of failure is comparatively less for each than failure at the
acceptance testing stage. - ANSWERWhat is Unit testing and what is the impact of
test failure at this stage?
Interface errors are identified early - ANSWERWhat are the advantages of top-down
approach?
Program evaluation review technique chart - ANSWERThe technique that provides
the GREATEST assistance in developing an estimate of project duration.
, Ensure that a file cannot be overwritten or deleted before that date has passed. -
ANSWERWhat does a retention date do?
Developments may result in hardware and software incompatibility. - ANSWERWhat
is the greatest risk created by a reciprocal agreement?
The method of routing traffic through split cable or duplicate cable facilities -
ANSWERWhat is diverse routing?
This is a method of routing information via an alternate medium such as copper
cable or fiber optics. This involves the use of different networks, circuits or end points
should the normal network be unavailable. - ANSWERWhat is alternative routing?
This is a diverse, long-distance network using different packet switching circuits
among the major long-distance carriers. It ensures long-distance access should any
carrier experience a network failure. - ANSWERWhat is long-haul network diversity?
This is a redundant combination of local carrier T-1s (E-1s in Europe), microwave
and/or coaxial cable access to the local communications loop. This enables the
facility to have access during a local carrier communication disaster. Alternate local-
carrier routing is also used. - ANSWERWhat is last-mile circuit protection?
exact duplicates of the files are maintained at the same site or at a remote site. The
two files are processed concurrently. This is used for critical data files such as airline
booking systems - ANSWERWhat is shadow file processing?
Electronically transmitting data either to direct access storage, an optical disc or
another storage medium; this is a method used by banks. This is not usually in real
time as much as a shadow file system. - ANSWERWhat is electronic vaulting?
Hard-disk mirroring provides redundancy in case the primary hard disk fails. All
transactions and operations occur on two hard disks in the same server -
ANSWERWhat is hard-disk mirroring?
To ensure the SLAs are being met. - ANSWERWhat is the primary benefit of a
manager monitoring technical capacity?
version control software - ANSWERBest way to ensure software on backup server is
not put into prod?
Which of the following is the MOST reliable method to ensure identity of sender for
messages transferred across Internet?a Digital signatures
b Asymmetric cryptography
c Digital certificates
d Message authentication code
a These are used for both authentication and integrity, but the identity of the sender
would still be confirmed by the digital certificate.
bThis appears to authenticate the sender but is vulnerable to a man-in-the-middle
attack.
Answers 100% Correct!!
Completing a Risk Analysis. - ANSWERWhat is the most important consideration
before implementing a new technology?
Indemnity Clause - ANSWERWhat is a clause that holds providers financially liable
for violations?
Agreed upon performance metrics in the SLA - ANSWERWhat is the best reference
for vendor's ability to meet its SLA?
Integrated Test Facility (ITF) - ANSWERWhat creates a fictitious entity in the
database to process test transactions simultaneously with live input
Its advantage is that periodic testing does not require separate test processes.
Careful planning is necessary, and test data must be isolated from production data. -
ANSWERWhat are the advantages of an ITF?
This is undertaken by the development team to determine if the combined units of
software work together and that the software meets user requirements per
specifications. A failure here would be expensive but easier to fix than a failure found
later in the testing process. - ANSWERWhat is system testing and what is the impact
of a test failure like at this phase of testing?
This is the final stage before the software is installed and is available for use. The
greatest impact would occur if the software fails at the acceptance testing level
because this could result in delays and cost overruns. - ANSWERWhat is
Acceptance testing and what is the impact of test failure at this stage?
This examines the units/modules as one integrated system. A failure here would be
expensive and require re-work of the modules but would not be as expensive as a
problem found just prior to implementation. - ANSWERWhat is Integration testing
and what is the impact of test failure at this stage?
unit testing examines the individual units or components of the software. System,
integration and unit testing are all performed by the developers at various stages of
development; the impact of failure is comparatively less for each than failure at the
acceptance testing stage. - ANSWERWhat is Unit testing and what is the impact of
test failure at this stage?
Interface errors are identified early - ANSWERWhat are the advantages of top-down
approach?
Program evaluation review technique chart - ANSWERThe technique that provides
the GREATEST assistance in developing an estimate of project duration.
, Ensure that a file cannot be overwritten or deleted before that date has passed. -
ANSWERWhat does a retention date do?
Developments may result in hardware and software incompatibility. - ANSWERWhat
is the greatest risk created by a reciprocal agreement?
The method of routing traffic through split cable or duplicate cable facilities -
ANSWERWhat is diverse routing?
This is a method of routing information via an alternate medium such as copper
cable or fiber optics. This involves the use of different networks, circuits or end points
should the normal network be unavailable. - ANSWERWhat is alternative routing?
This is a diverse, long-distance network using different packet switching circuits
among the major long-distance carriers. It ensures long-distance access should any
carrier experience a network failure. - ANSWERWhat is long-haul network diversity?
This is a redundant combination of local carrier T-1s (E-1s in Europe), microwave
and/or coaxial cable access to the local communications loop. This enables the
facility to have access during a local carrier communication disaster. Alternate local-
carrier routing is also used. - ANSWERWhat is last-mile circuit protection?
exact duplicates of the files are maintained at the same site or at a remote site. The
two files are processed concurrently. This is used for critical data files such as airline
booking systems - ANSWERWhat is shadow file processing?
Electronically transmitting data either to direct access storage, an optical disc or
another storage medium; this is a method used by banks. This is not usually in real
time as much as a shadow file system. - ANSWERWhat is electronic vaulting?
Hard-disk mirroring provides redundancy in case the primary hard disk fails. All
transactions and operations occur on two hard disks in the same server -
ANSWERWhat is hard-disk mirroring?
To ensure the SLAs are being met. - ANSWERWhat is the primary benefit of a
manager monitoring technical capacity?
version control software - ANSWERBest way to ensure software on backup server is
not put into prod?
Which of the following is the MOST reliable method to ensure identity of sender for
messages transferred across Internet?a Digital signatures
b Asymmetric cryptography
c Digital certificates
d Message authentication code
a These are used for both authentication and integrity, but the identity of the sender
would still be confirmed by the digital certificate.
bThis appears to authenticate the sender but is vulnerable to a man-in-the-middle
attack.
