ISACA CISA Assessment

Which RAID level provides the greatest level of redundancy?*
- RAID 6
- RAID 0
- RAID 1
- RAID 5

What is recovery point objective?*
- The amount of time it takes to recover in the event of a disaster
- The period for which recent data will be lost in a disaster
- The number of point-in-time backups retained for a disaster
- The point at which a disaster necessitates a recovery

Which of the following tools is best for testing software modules?*
- Desk checking
- Documented process walkthrough
- Blackbox testing
- Developer interviews

While reviewing the IT infrastructure, an IS auditor notices that storage resources are continuously being added. The IS auditor should:*
- Recommend disk mirroring or RAID 1
- Recommend implementation of a change control process
- Review the capacity management process
- Recommend a compression algorithm

At which layer of the OSI model do confidentiality, authentication, and data integrity services for transmissions operate?*
- Presentation layer
- Session layer
- Network layer
- Physical layer

Which of the following is most true regarding manual controls versus automated controls?*
- Manual controls require human interaction while automated controls do not, but the difference is inconsequential in an audit
- Manual controls only require human interaction in the early stages, while automated controls are fully independent
- Automated controls are not susceptible to human error while manual controls are, which should be taken into account during an audit
- There is no difference

To whom should an internal IS auditor report?*
- IS management / director
- Business unit management
- Senior management
- Shareholders

What is/are the primary measurements used to determine the effectiveness of a biometric system?*
- False reject rate
- False accept rate
- Crossover error rate
- All of the above

What is the strongest measure an auditor can recommend for an organization to secure their Wi-Fi network?*
- Disable SSID broadcast
- Implement MAC address filtering
- Use a 12-character or longer pre-shared key
- Implement 802.1x certificate-based authentication

Which of the following is an example of asymmetric, or public key, cryptography?*
- AES
- ECC
- DES
- Blowfish