CISA 試験問題を無料オンラインアクセス

From a risk management perspective, which of the following is the BEST approach when implementing a large and complex data center IT infrastructure?

• A.Prototyping and a one-phase deployment
• B.Simulating the new infrastructure before deployment
• C.A big bang deployment with a successful proof of concept
• D.A deployment plan based on sequenced phases

Which of the following would provide the BEST evidence that a cloud provider ' s change management process is effective?

• A.The results of a third-party review provided by the vendor
• B.Written assurances from the vendor ' s CEO and CIO
• C.Minutes from regular change management meetings with the vendor
• D.A copy of change management policies provided by the vendor

Which of the following activities provides an IS auditor with the MOST insight regarding potential single person dependencies that might exist within the organization?

• A.Reviewing vacation patterns
• B.Interviewing senior IT management
• C.Reviewing user activity logs
• D.Mapping IT processes to roles

Which of the following should be restricted from a network administrator ' s privileges in an adequately segregated IT environment?

• A.Ensuring transmission protocols are functioning correctly
• B.Monitoring network traffic
• C.Changing existing configurations for applications
• D.Hardening network ports

Which of the following BEST helps monitor and manage operational logs to create value for an organization?

• A.Using automated tools to collect logs and raise alerts based on use cases
• B.Reporting results of log analyses to senior management for review
• C.Selecting logs only from critical operational systems and devices for monitoring
• D.Encrypting logs processed before archiving for defined retention periods