Scribd Logo
Upload

Welcome to Scribd!

  • Question 2146

    Uploaded by

    MM
    10 views1 page
    This document contains two questions related to information security best practices. The first question asks which is most important when contracting an external party to perform a penetration test, with defining the project scope being the suggested answer. The second question asks which is the most effective control for emergency changes to application programs, with processing the change through change control with review of the change the following day being the suggested answer.

    Original Description:

    CISA questions 2416 2737

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document contains two questions related to information security best practices. The first question asks which is most important when contracting an external party to perform a penetration test, with defining the project scope being the suggested answer. The second question asks which is the most effective control for emergency changes to application programs, with processing the change through change control with review of the change the following day being the suggested answer.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as docx, pdf, or txt
    10 views1 page

    Question 2146

    Uploaded by

    MM
    This document contains two questions related to information security best practices. The first question asks which is most important when contracting an external party to perform a penetration test, with defining the project scope being the suggested answer. The second question asks which is the most effective control for emergency changes to application programs, with processing the change through change control with review of the change the following day being the suggested answer.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as docx, pdf, or txt
    of 1

    Question #: 2416

    Topic #: 1

    Which is MOST important when contracting an external party to perform a


    penetration test?

     A. Obtain approval from IT management.


     B. Define the project scope.
     C. Increase the frequency of log reviews.
     D. Provide network documentation.

    Suggested Answer: B 🗳️

    To properly implement data classification, establishing data ownership is an important first


    step.

    Question #: 2737
    Topic #: 1

    Which of the following is the MOST effective control for emergency changes to
    application programs?

     A. Processing the change through change control with review of the change the
    following day
     B. Keeping a sealed envelope containing a password that operators can use to make
    emergency changes
     C. Periodically checking the application program libraries to detect whether
    unauthorized changes have been made
     D. Preparing and approving program change forms before the changes are made

    Suggested Answer: A 🗳️

    You might also like