Certified Information Security Audit

The CISA® certification is a globally recognized symbol of excellence for audit professionals. It helps the IT professional in the following ways:

• • Completing the CISA certification ensures that the IT professional has the necessary knowledge and experience for adequately controlling, monitoring and assessing an enterprise’s IT and business systems.

 

• • The CISA certification proves that the professional can perform reviews while adhering to global standards, practices and guidelines.

 

• • It also establishes that the employee continually improves his or her skills for successful performance at the workplace.

 

• • The CISA certification helps IT security and audit professionals to quantify and market their experience.

 

• • It demonstrates the level of knowledge acquired and maintained to meet dynamic challenges and increases their value in the organization resulting in higher earnings and career growth.

 

• • Being CISA certified not only gives individuals a competitive edge but also helps them become part of an elite peer network.

 

• • With CISA, audit professionals can take advantage of the tools and resources of a global community of experts.

 

• • 32 hours of instructor-led training:

 

• • 5 Domain specific test papers (10 questions each)

 

• • 5 Simulation Exams ( 150 Questions each)

 

• • Batch recordings for life time.

 

• • 30 CPEs/PDUs Offered

 

• • 98.6% Pass rate

 

• • Course Completion Certificate

 

• • Get 24*7 support via chat and e-mail

 

• • The Process of Auditing Information Systems (14% of the exam or 28 questions)

 

• • Governance and Management of IT (14% of the exam or 28 questions)

 

• • Information Systems Acquisition, Development and Implementation (19% of the exam or 38 questions)

 

• • Information Systems Operations, Maintenance and Support (23% of the exam or 46 questions)

 

• • Protection of Information Assets (30% of the exam or 60 questions)

 

• • The CISA course is focused on providing an improved understanding of IS security audit processes and better awareness on how to protect information systems.

 

1. Which of the following would MOST effectively control the usage of universal storage bus (USB) storage devices?
2. a) Policies that require instant dismissal if such devices are found
3. b) Software for tracking and managing USB storage devices
4. c) Administratively disabling the USB port
5. d) Searching personnel for USB storage devices at the facility's entrance

 

2. An IS auditor finds that a DBA has read and write access to production datA. The IS auditor should:
3. a) accept the DBA access as a common practice.
4. b) assess the controls relevant to the DBA function.
5. c) recommend the immediate revocation of the DBA access to production data.
6. d) review user access authorizations approved by the DBA.

www.apclearning.com

3. What is the primary objective of a control self-assessment (CSA) program?
4. a) Enhancement of the audit responsibility
5. b) Elimination of the audit responsibility
6. c) Replacement of the audit responsibility
7. d) Integrity of the audit responsibility

www.apclearning.com

4. Responsibility and reporting lines cannot always be established when auditing automated systems since:
5. a) diversified control makes ownership irrelevant.
6. b) staff traditionally changes jobs with greater frequency.
7. c) ownership is difficult to establish where resources are shared.
8. d) duties change frequently in the rapid development of technology.
9. Which of the following exposures could be caused by a line grabbing technique?
10. a) Unauthorized data access
11. b) Excessive CPU cycle usage
12. c) Lockout of terminal polling
13. d) Multiplexor control dysfunction

www.apclearning.com

6. The GREATEST advantage of using web services for the exchange of information between two systems is:
7. a) secure communications.
8. b) improved performance.
9. c) efficient interfacing.
10. d) enhanced documentation.

www.apclearning.com

7. Applying a digital signature to data traveling in a network provides:
8. a) confidentiality and integrity
9. b) security and nonrepudiation.
10. c) integrity and nonrepudiation.
11. d) confidentiality and nonrepudiation.
12. If the recovery time objective (RTO) increases:
13. a) the disaster tolerance increases.
14. b) the cost of recovery increases.
15. c) a cold site cannot be used.
16. d) the data backup frequency increases.

www.apclearning.com

9. What uses questionnaires to lead the user through a series of choices to reach a conclusion?
10. a) Logic trees
11. b) Decision trees
12. c) Decision algorithms
13. d) Logic algorithms

www.apclearning.com

10. Naming conventions for system resources are important for access control because they:
11. a) ensure that resource names are not ambiguous
12. b) reduce the number of rules required to adequately protect resources.
13. c) ensure that user access to resources is clearly and uniquely identified.
14. d) ensure that internationally recognized names are used to protect resources.

www.apclearning.com Answers:               Question: 01 Answer: b Question: 02 Answer: b Question: 03 Answer: a Question: 04 Answer: c Question: 05 Answer: a Answer: b Question: 06 Answer: c Question: 07 Answer: c Question: 08 Answer: a Question: 09 Answer: b Question: 10