CISA Sample Questions

21. Which of the following acts as a decoy to detect active Internet attacks?
    1. Honeypots
    2. Firewalls
    3. Trapdoors
    4. Traffic analysis

    Answer: A

22. Which of the following is the MOST effective control when granting temporary access to vendors?
    1. Vendor access corresponds to the service level agreement (SLA).
    2. User accounts are created with expiration dates and are based on services provided.
    3. Administrator access is provided for a limited period.
    4. User IDs are deleted when the work is completed.

    Answer: B

23. A certifying authority (CA) can delegate the processes of:
    1. revocation and suspension of a subscriber's certificate.
    2. generation and distribution of the CA public key.
    3. establishing a link between the requesting entity and its public key.
    4. issuing and distributing subscriber certificates.

    Answer: C

24. An organization with extremely high security requirements is evaluating the effectiveness of biometric systems. Which of the following performance indicators is MOST important?
    1. False-acceptance rate (FAR)
    2. Equal-error rate (EER)
    3. False-rejection rate (FRR)
    4. False-identification rate (FIR)

    Answer: A

25. To develop a successful business continuity plan, end-user involvement is critical during which of the following phases?
    1. Business recovery strategy
    2. Detailed plan development
    3. Business impact analysis (BIA)
    4. Testing and maintenance

    Answer: C