NO.1 Due to changes in IT, the disaster recovery plan of a large organization has been changed. What
is the PRIMARY risk if the new plan is not tested?
A. Catastrophic service interruption
B. High consumption of resources
C. Total cost of the recovery may not be minimized
D. Users and recovery teams may face severe difficulties when activating the plan
Answer: A

ISACA Practice Exam   CISA Exam Cram   CISA Practice Test
Explanation:
Choices B, C and D are all possible problems that might occur, and would cause difficulties and
financial losses or waste of resources. However, if a new disaster recovery plan is not tested, the
possibility of a catastrophic service interruption is the most critical of all risks.

NO.2 An IS auditor was hired to review e-business security. The IS auditor's first task was to examine
each existing e-business application looking for vulnerabilities. What would be the next task?
A. Report the risks to the CIO and CEO immediately
B. Examine e-business application in development
C. Identify threats and likelihood of occurrence
D. Check the budget available for risk management
Answer: C

ISACA braindump   CISA test questions   CISA Latest Dumps   CISA certification training   CISA original questions
Explanation:
An IS auditor must identify the assets, look for vulnerabilities, and then identify the threats and the
likelihood of occurrence. Choices A, B and D should be discussed with the CIO, and a report should be
delivered to the CEO. The report should include the findings along with priorities and costs.

NO.3 Which of the following would effectively verify the originator of a transaction?
A. Using a secret password between the originator and the receiver
B. Encrypting the transaction with the receiver's public key
C. Using a portable document format (PDF) to encapsulate transaction content
D. Digitally signing the transaction with the source's private key
Answer: D

ISACA   CISA Real Questions   CISA original questions   CISA   CISA   CISA
Explanation:
A digital signature is an electronic identification of a person, created by using a public key algorithm,
to verify to a recipient the identity of the source of a transaction and the integrity of its content.
Since they are a 'shared secret' between the user and the system itself, passwords are considered a
weaker means of authentication. Encrypting the transaction with the recipient's public key will
provide confidentiality for the information, while using a portable document format(PDF) will probe
the integrity of the content but not necessarily authorship.

NO.4 When developing a security architecture, which of the following steps should be executed
FIRST?
A. Developing security procedures
B. Defining a security policy
C. Specifying an access control methodology
D. Defining roles and responsibilities
Answer: B

ISACA answers real questions   CISA original questions   CISA Exam PDF   CISA Test Answers
Explanation:
Defining a security policy for information and related technology is the first step toward building a
security architecture. A security policy communicates a coherent security standard to users,
management and technical staff. Security policies willoften set the stage in terms of what tools and
procedures are needed for an organization. The other choices should be executed only after defining
a security policy.

NO.5 Which of the following could lead to an unintentional loss of confidentiality? Choose the BEST
answer.
A. Lack of employee awareness of a company's information security policy
B. Failure to comply with a company's information security policy
C. A momentary lapse of reason
D. Lack of security policy enforcement procedures
Answer: A

ISACA   CISA dumps torrent   CISA demo   CISA Real Questions   CISA Exam Tests
Explanation:
Lack of employee awareness of a company's information security policy could lead to an
unintentional loss of confidentiality.

NO.6 A live test of a mutual agreement for IT system recovery has been carried out, including a
four-hour test of intensive usage by the business units. The test has been successful, but gives only
partial assurance that the:
A. system and the IT operations team can sustain operations in the emergency environment.
B. resources and the environment could sustain the transaction load.
C. connectivity to the applications at the remote site meets response time requirements.
D. workflow of actual business operations can use the emergency system in case of a disaster.
Answer: A

ISACA Test Answers   CISA demo   CISA practice test
Explanation:
The applications have been intensively operated, therefore choices B, C and D have been actually
tested, but the capability of the system and the IT operations team to sustain and support this
environment (ancillary operations, batch closing, error corrections, output distribution, etc.) is only
partially tested.

NO.7 Which of the following refers to the act of creating and using an invented scenario to persuade
a target to perform an action?
A. Pretexting
B. Backgrounding
C. Check making
D. Bounce checking
E. None of the choices.
Answer: A

ISACA exam dumps   CISA Real Questions   CISA VCE Dumps
Explanation:
Pretexting is the act of creating and using an invented scenario to persuade a target to release
information or perform an action and is usually done over the telephone. It is more than a simple lie
as it most often involves some prior research or set up and the use of pieces of known information.

NO.8 Which of the following applet intrusion issues poses the GREATEST risk of disruption to an
organization?
A. A program that deposits a virus on a client machine
B. Applets recording keystrokes and, therefore, passwords
C. Downloaded code that reads files on a client's hard drive
D. Applets opening connections from the client machine
Answer: D

ISACA Test Answers   CISA dumps   CISA Dumps PDF   CISA Exam PDF   CISA Test Answers   CISA
Explanation:
An applet is a program downloaded from a web server to the client, usually through a web browser
that provides functionality for database access, interactive web pages and communications with
other users. Applets opening connections from the client machine to other machines on the network
and damaging those machines, as a denial-of-service attack, pose the greatest threat to an
organization and could disrupt business continuity. A program that deposits a virus on a client
machine is referred toas a malicious attack (i.e., specifically meant to cause harm to a client
machine), but may not necessarily result in a disruption of service. Applets that record keystrokes,
and therefore, passwords, and downloaded code that reads files on a client's hard drive relate more
to organizational privacy issues, and although significant, are less likely to cause a significant
disruption of service.

Using BraindumpsQA's CISA test certification training materials to pass CISA certification exam is easy. Our CISA exam certification training materials is made up of senior IT specialist team through their own exploration and continuous practice and research. Our BraindumpsQA's CISA test certification training materials can help you in your first attempt to pass CISA exam easily.

BraindumpsQA is a website which can give much convenience and meet the needs and achieve dreams for many people participating IT certification exams. If you are still worrying about passing some IT certification exams, please choose BraindumpsQA to help you. BraindumpsQA can make you feel at ease, because we have a lot of IT certification exam related training materials with high quality, coverage of the outline and pertinence, too, which will bring you a lot of help. You won't regret to choose BraindumpsQA, it can help you build your dream career.

Of course, when you are seeking for exam materials, it is certain that you will find many different materials. However, through investigation or personal experience, you will find BraindumpsQA questions and answers are the best ones for your need. The candidates have not enough time to prepare the exam, while BraindumpsQA certification training materials are to develop to solve the problem. So, it can save much time for us. What's more important, 100% guarantee to pass ISACA CISA exam at the first attempt. In addition, BraindumpsQA exam dumps will be updated at any time. If exam outline and the content change, BraindumpsQA can provide you with the latest information.

Exam Code: CISA
Exam Name: Certified Information Systems Auditor
One year free update, No help, Full refund!
CISA PDF VCE Total Q&A: 1178 Questions and Answers
Last Update: 06-23,2015

CISA Exam PDF Detail : Click Here

ISACA certification CISA exam is the first step for the IT employees to set foot on the road to improve their job. Passing ISACA certification CISA exam is the stepping stone towards your career peak. BraindumpsQA can help you pass ISACA certification CISA exam successfully.

BraindumpsQA offer the latest C2070-587 exam material and high-quality 000-318 pdf questions & answers. Our 3V00290A VCE testing engine and C4070-622 study guide can help you pass the real exam. High-quality P2170-037 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.

Article Link: http://www.braindumpsqa.com/CISA_braindumps.html