CHAPTER 5 - CISA

(C-5-1) A fire sprinkler system has water in its pipes, and sprinkler heads emit water only

if the ambient temperature reaches 220°F. What type of system is this?

• Deluge

• Post-action

• Wet Pipe

• Pre-Action

(C-5-2) An organization is building a data center in an area frequented by power outages.

The organization cannot tolerate power outages. What power system controls

should be selected?

• Uninterruptible power supply and electric generator

• Uninterruptible power supply and batteries

• Electric generator

• Electric generator and line conditioning

(C-5-3) An auditor has discovered several errors in user account management: many

terminated employees’ computer accounts are still active. What is the best course

of action?

• Improve the employee termination process.

• Shift responsibility for employee terminations to another group.

• Audit the process more frequently.

• Improve the employee termination process and audit the process more

  frequently.

(C-5-4) An auditor has discovered that several administrators in an application share an

administrative account. What course of action should the auditor recommend?

• Implement activity logging on the administrative account

• Use several named administrative accounts that are not shared.

• Implement a host-based intrusion detection system.

• Require each administrator to sign nondisclosure and acceptable-use

  agreements.

(C-5-5) An organization that has experienced a sudden increase in its long-distance

charges has asked an auditor to investigate. What activity is the auditor likely to

suspect is responsible for this?

A. Employees making more long-distance calls

B. Toll fraud

C. PBX malfunction

D. Malware in the PBX

• Employees making more long-distance calls

• Toll fraud

• PBX malfunction

• Malware in the PBX

(C-5-6) An auditor is examining a key management process and has found that the

IT department is not following its split-custody procedure. What is the likely

result of this failure?

• One or more individuals are in possession of the entire password for an

  encryption key.

• One or more individuals are in possession of encrypted files.

• Backup tapes are not being stored at an off-site facility.

• Two or more employees are sharing an administrative account.

(C-5-7) A developer is updating an application that saves passwords in plaintext. What is

the best method for securely storing passwords?

• Encrypted with each user’s public key

• Encrypted with a public key

• Encrypted with a private key

• Hashed

(C-5-8) An organization experiences frequent malware infections on end-user

workstations that are received through e-mail, despite the fact that workstations

have anti-malware software. What is the best measure for reducing malware?

• Anti-malware software on web proxy servers

• Firewalls

• Anti-malware software on e-mail servers

• Intrusion prevention systems

(C-5-9) An auditor has reviewed the access privileges of some employees and has

discovered that employees with longer terms of service have excessive privileges.

What can the auditor conclude from this?

• Employee privileges are not being removed when they transfer from one

  position to another.

• Long-time employees are able to guess other users’ passwords successfully and

  add to their privileges.

• Long-time employees’ passwords should be set to expire more frequently.

• The organization’s termination process is ineffective

(C-5-10) An organization wants to reduce the number of user IDs and passwords that its

employees need to remember. What is the best available solution to this problem?

• Password vaults for storing user IDs and passwords

• Token authentication

• Single sign-on

• Reduced sign-on