Madanswer Technologies Interview Questions Data|Agile|DevOPs|Python - Recent questions in CISA

When a system moves into production and changes are needed, which of the following is the final step in the change control process?

Sat, 20 May 2023 21:16:54 +0000

When a system moves into production and changes are needed, which of the following is the final step in the change control process?

a) Document the new configuration.

b) Test the proposed change.

c) Implement the change, if approved.

d) Present the results to the change-control board.

Which database-related term refers to the process of combining several low-sensitivity items to produce a high-sensitivity data item?

Sat, 20 May 2023 21:16:36 +0000

Which database-related term refers to the process of combining several low-sensitivity items to produce a high-sensitivity data item?

a) Relation

b) Aggregation

c) Granularity

d) Foreign key

In the NIST version of the SDLC process, the system or program performs the work for which it was designed in which waterfall phase?

Sat, 20 May 2023 21:16:20 +0000

In the NIST version of the SDLC process, the system or program performs the work for which it was designed in which waterfall phase?

a) Operation/Maintenance

b) Implementation

c) Initiation

d) Disposal

During which step of the audit life cycle does an auditor identify which skills are needed for the audit, how many auditors are required, and what other resources are needed?

Sat, 20 May 2023 21:16:01 +0000

During which step of the audit life cycle does an auditor identify which skills are needed for the audit, how many auditors are required, and what other resources are needed?

a) Audit objective

b) Pre-audit planning

c) Data gathering

d) Results evaluation

Observation and testing can be used effectively in which of the following areas?

Sat, 20 May 2023 21:15:40 +0000

Observation and testing can be used effectively in which of the following areas?

a) Separation of duties

b) Error correction and control

c) Input authorization

d) All of the above

In project management, which of the following is a task related to closing a project?

Sat, 20 May 2023 21:15:21 +0000

In project management, which of the following is a task related to closing a project?

a) Release of final product or service

b) Update of organizational assets

c) Administrative closure

d) All of the above

Where should an organization keep copies of the business continuity plan?

Sat, 20 May 2023 21:15:02 +0000

Where should an organization keep copies of the business continuity plan?

a) Onsite only

b) Offsite only

c) Both onsite and offsite

d) None of the above

From an auditing perspective, which of the following standards most closely maps to a Plan-Do-Check-Act (PDCA) approach?

Sat, 20 May 2023 21:14:41 +0000

From an auditing perspective, which of the following standards most closely maps to a Plan-Do-Check-Act (PDCA) approach?

a) HIPAA

b) ISO 27001

c) Taguchi

d) CMM

An auditor should recommend the use of which of the following to determine the minimum level of service needed at an alternate site?

Sat, 20 May 2023 21:14:26 +0000

An auditor should recommend the use of which of the following to determine the minimum level of service needed at an alternate site?

a) SDO

b) RTO

c) WRT

d) MTD

Which of the following symmetric algorithms is a block cipher that the U.S. government adopted as AES to replace DES?

Sat, 20 May 2023 21:14:04 +0000

Which of the following symmetric algorithms is a block cipher that the U.S. government adopted as AES to replace DES?

a) Rivest Cipher 4 (RC4)

b) Rijndael

c) Triple Data Encryption Standard (3DES)

d) Blowfish

The network of an organization has been the victim of several intruders’ attacks. Which of the following measures would allow for the early detection of such incidents?

Sat, 20 May 2023 21:13:38 +0000

The network of an organization has been the victim of several intruders’ attacks. Which of the following measures would allow for the early detection of such incidents?

A. Antivirus software

B. Hardening the servers

C. Screening routers

D. Honeypots

A company has decided to implement an electronic signature scheme based on public key infrastructure. The user’s private key will be stored on the computer’s hard drive and protected by a

Sat, 20 May 2023 21:13:09 +0000

A company has decided to implement an electronic signature scheme based on public key infrastructure. The user’s private key will be stored on the computer’s hard drive and protected by a password. The MOST significant risk of this approach is:

A. use of the user’s electronic signature by another person if the password is compromised.

B. forgery by using another user’s private key to sign a message with an electronic signature.

C. impersonation of a user by substitution of the user’s public key with another person’s public key.

D. forgery by substitution of another person’s private key on the computer.

An IS auditor selects a server for a penetration test that will be carried out by a technical specialist. Which of the following is MOST important?

Sat, 20 May 2023 21:12:40 +0000

An IS auditor selects a server for a penetration test that will be carried out by a technical specialist. Which of the following is MOST important?

A. The tools used to conduct the test

B. Certifications held by the IS auditor

C. Permission from the data owner of the server

D. An intrusion detection system (IDS) is enabled

After observing suspicious activities in a server, a manager requests a forensic analysis.

Sat, 20 May 2023 21:12:13 +0000

After observing suspicious activities in a server, a manager requests a forensic analysis.

Which of the following findings should be of MOST concern to the investigator?

A. Server is a member of a workgroup and not part of the server domain

B. Guest account is enabled on the server

C. Recently, 100 users were created in the server

D. Audit logs are not enabled for the server

Which of the following would be the GREATEST cause for concern when data are sent over the Internet using HTTPS protocol?

Sat, 20 May 2023 21:11:46 +0000

Which of the following would be the GREATEST cause for concern when data are sent over the Internet using HTTPS protocol?

A. Presence of spyware in one of the ends

B. The use of a traffic sniffing tool

C. The implementation of an RSA-compliant solution

D. A symmetric cryptography is used for transmitting data

A firewall is being deployed at a new location. Which of the following is the MOST important factor in ensuring a successful deployment?

Sat, 20 May 2023 21:11:14 +0000

A firewall is being deployed at a new location. Which of the following is the MOST important factor in ensuring a successful deployment?

A. Reviewing logs frequently

B. Testing and validating the rules

C. Training a local administrator at the new location

D. Sharing firewall administrative duties

The human resources (HR) department has developed a system to allow employees to enroll in benefits via a web site on the corporate Intranet.

Sat, 20 May 2023 21:10:39 +0000

The human resources (HR) department has developed a system to allow employees to enroll in benefits via a web site on the corporate Intranet.

Which of the following would protect the confidentiality of the data?

A. SSL encryption

B. Two-factor authentication

C. Encrypted session cookies

D. IP address verification

What is the MOST prevalent security risk when an organization implements remote virtual private network (VPN) access to its network?is

Sat, 20 May 2023 21:10:10 +0000

What is the MOST prevalent security risk when an organization implements remote virtual private network (VPN) access to its network?

A. Malicious code could be spread across the network

B. VPN logon could be spoofed

C. Traffic could be sniffed and decrypted

D. VPN gateway could be compromised

The use of digital signatures:

Sat, 20 May 2023 21:09:39 +0000

The use of digital signatures:

A. requires the use of a one-time password generator.

B. provides encryption to a message.

C. validates the source of a message.

D. ensures message confidentiality.

The FIRST step in a successful attack to a system would be:

Sat, 20 May 2023 21:09:01 +0000

The FIRST step in a successful attack to a system would be:

A. gathering information.

B. gaining access.

C. denying services.

D. evading detection.