Study tips CISA

The IS auditor’s main concern should be that:

The implementation of access controls FIRST requires:

The implementation of access controls FIRST requires:

Which of the following is an example of the defense in-depth security principle?

Which of the following is an example of the defense in-depth security principle?

Which of the following would be the BEST access control procedure?

Which of the following would be the BEST access control procedure?

Which of the following would MOST effectively reduce social engineering incidents?

Which of the following would MOST effectively reduce social engineering incidents?

An information security policy stating that ‘the display of passwords must be masked or suppressed’ addresses which of the following attack methods?