CA Foundation Business Economics Questions 2023 - Part 32
Fri, 03 Mar 2023
Inspirational journeys
Follow the stories of academics and their research expeditions
CISA—Certified Information Systems Auditor - Part 271
1. An IS auditor finds that a DBA has read and write access to production data. The IS auditor should:
A) accept the DBA access as a common practice.
B) assess the controls relevant to the DBA function.
C) recommend the immediate revocation of the DBA access to production data.
D) review user access authorizations approved by the DBA.
2. When using a universal storage bus (USB) flash drive to transport confidential corporate data to an offsite location, an effective control would be to:
A) carry the flash drive in a portable safe.
B) assure management that you will not lose the flash drive.
C) request that management deliver the flash drive by courier.
D) encrypt the folder containing the data with a strong key.
3. A business application system accesses a corporate database using a single ID and password embedded in a program. Which of the following would provide efficient access control over the organization's data?
A) Introduce a secondary authentication method such as card swipe
B) Apply role-based permissions within the application system
C) Have users input the ID and password for each database transaction
D) Set an expiration period for the database password embedded in the program
4. Which of the following is the BEST practice to ensure that access authorizations are still valid?
A) information owner provides authorization for users to gain access
B) identity management is integrated with human resource processes
C) information owners periodically review the access controls
D) An authorization matrix is used to establish validity of access
5. A technical lead who was working on a major project has left the organization. The project manager reports suspicious system activities on one of the servers that is accessible to the whole team. What would be of GREATEST concern if discovered during a forensic investigation?
A) Audit logs are not enabled for the system
B) A logon ID for the technical lead still exists
C) Spyware is installed on the system
D) A Trojan is installed on the system
A) accept the DBA access as a common practice.
B) assess the controls relevant to the DBA function.
C) recommend the immediate revocation of the DBA access to production data.
D) review user access authorizations approved by the DBA.
2. When using a universal storage bus (USB) flash drive to transport confidential corporate data to an offsite location, an effective control would be to:
A) carry the flash drive in a portable safe.
B) assure management that you will not lose the flash drive.
C) request that management deliver the flash drive by courier.
D) encrypt the folder containing the data with a strong key.
3. A business application system accesses a corporate database using a single ID and password embedded in a program. Which of the following would provide efficient access control over the organization's data?
A) Introduce a secondary authentication method such as card swipe
B) Apply role-based permissions within the application system
C) Have users input the ID and password for each database transaction
D) Set an expiration period for the database password embedded in the program
4. Which of the following is the BEST practice to ensure that access authorizations are still valid?
A) information owner provides authorization for users to gain access
B) identity management is integrated with human resource processes
C) information owners periodically review the access controls
D) An authorization matrix is used to establish validity of access
5. A technical lead who was working on a major project has left the organization. The project manager reports suspicious system activities on one of the servers that is accessible to the whole team. What would be of GREATEST concern if discovered during a forensic investigation?
A) Audit logs are not enabled for the system
B) A logon ID for the technical lead still exists
C) Spyware is installed on the system
D) A Trojan is installed on the system
1. Right Answer: B
Explanation: It is good practice when finding a potential exposure to look for the best controls. Though granting the database administrator (DBA) access to production data might be a common practice, the IS auditor should evaluate the relevant controls. The DBA should have access based on a need-to- know and need-to-do basis; therefore, revocation may remove the access required. The DBA, typically, may need to have access to some production data. Granting user authorizations is the responsibility of the data owner and not the DBA.
2. Right Answer: D
Explanation: Encryption, with a strong key, is the most secure method for protecting the information on the flash drive. Carrying the flash drive in a portable safe does not guarantee the safety of the information in the event that the safe is stolen or lost. No matter what measures you take, the chance of losing the flash drive still exists. It is possible that a courier might lose the flash drive or that it might be stolen.
3. Right Answer: B
Explanation: When a single ID and password are embedded in a program, the best compensating control would be a sound access control over the application layer and procedures to ensure access to data is granted based on a user's role. The issue is user permissions, not authentication, therefore adding a stronger authentication does not improve the situation. Having a user input the ID and password for access would provide a better control because a database log would identify the initiator of the activity. However, this may not be efficient because each transaction would require a separate authentication process. It is a good practice to set an expiration date for a password. However, this might not be practical for an ID automatically logged in from the program. Often, this type of password is set not to expire.
4. Right Answer: B
Explanation: Personnel and departmental changes can result in authorization creep and can impact the effectiveness of access controls. Many times when personnel leave an organization, or employees are promoted, transferred or demoted, their system access is not fully removed, which increases the risk of unauthorized access. The best practices for ensuring access authorization is still valid is to integrate identity management with human resources processes. When an employee transfers to a different function, access rights are adjusted at the same time.
5. Right Answer: A
Explanation: Audit logs are critical to the investigation of the event; however, if not enabled, misuse of the logon ID of the technical lead and the guest account could not be established. The logon ID of the technical lead should have been deleted as soon as the employee left the organization but, without audit logs, misuse of the ID is difficult to prove. Spyware installed on the system is a concern but could have been installed by any user and, again, without the presence of logs, discovering who installed the spyware is difficult. A Trojan installed on the system is a concern, but it can be done by any user as it is accessible to the whole group and, without the presence of logs, investigation would be difficult.
Explanation: It is good practice when finding a potential exposure to look for the best controls. Though granting the database administrator (DBA) access to production data might be a common practice, the IS auditor should evaluate the relevant controls. The DBA should have access based on a need-to- know and need-to-do basis; therefore, revocation may remove the access required. The DBA, typically, may need to have access to some production data. Granting user authorizations is the responsibility of the data owner and not the DBA.
2. Right Answer: D
Explanation: Encryption, with a strong key, is the most secure method for protecting the information on the flash drive. Carrying the flash drive in a portable safe does not guarantee the safety of the information in the event that the safe is stolen or lost. No matter what measures you take, the chance of losing the flash drive still exists. It is possible that a courier might lose the flash drive or that it might be stolen.
3. Right Answer: B
Explanation: When a single ID and password are embedded in a program, the best compensating control would be a sound access control over the application layer and procedures to ensure access to data is granted based on a user's role. The issue is user permissions, not authentication, therefore adding a stronger authentication does not improve the situation. Having a user input the ID and password for access would provide a better control because a database log would identify the initiator of the activity. However, this may not be efficient because each transaction would require a separate authentication process. It is a good practice to set an expiration date for a password. However, this might not be practical for an ID automatically logged in from the program. Often, this type of password is set not to expire.
4. Right Answer: B
Explanation: Personnel and departmental changes can result in authorization creep and can impact the effectiveness of access controls. Many times when personnel leave an organization, or employees are promoted, transferred or demoted, their system access is not fully removed, which increases the risk of unauthorized access. The best practices for ensuring access authorization is still valid is to integrate identity management with human resources processes. When an employee transfers to a different function, access rights are adjusted at the same time.
5. Right Answer: A
Explanation: Audit logs are critical to the investigation of the event; however, if not enabled, misuse of the logon ID of the technical lead and the guest account could not be established. The logon ID of the technical lead should have been deleted as soon as the employee left the organization but, without audit logs, misuse of the ID is difficult to prove. Spyware installed on the system is a concern but could have been installed by any user and, again, without the presence of logs, discovering who installed the spyware is difficult. A Trojan installed on the system is a concern, but it can be done by any user as it is accessible to the whole group and, without the presence of logs, investigation would be difficult.
Tags:
it certification certified it it exams isaca certification isaca cgeit isaca cisa isaca cism isaca cobit 5 isaca crisc isaca questions practice exams pratice quests risc maangement it management it questions isaca answers isaca practice isaca dumps isaca test test questions questins and answer explanation0 Comments
Categories
Recent posts
CA Foundation Business Economics Questions 2023 - Part 31
Fri, 03 Mar 2023
CA Foundation Business Economics Questions 2023 - Part 30
Fri, 03 Mar 2023
Leave a comment