上海汇哲5月8日CISA培训练习题
cisa吧
全部回复
仅看楼主
level 1
IT审计师评价一个无线网络,其最应关注以下哪一项
A、使用128-bit静态WEP加密
B、使用SSID广播
C、所有无线客户机安装了防病毒软件
D、配置MAC访问过滤控制 A
n IS auditor observes a weakness in the tape management system at a data center in that some parameters are set to bypass or ignore tape header records. Which of the following is the MOST effective compensating control for this weakness?
A、Staging and job set up
B、Supervisory review of logs
C、Regular back-up of tapes
D、Offsite storage of tapes
2012年05月08日 02点05分 1
level 1
中文题答案:B
SSID广播允许使用者收寻可用的无线网络,并无需授权即可访问它们。选项 A、C和D被使用在一个增强的无线网络中。
ANSWER: A
NOTE: If the IS auditor finds that there are effective staging and job set up processes, this can be accepted as a compensating control. Choice B is a detective control while choices C and D are corrective controls, none of which would serve as good compensating controls.
近期计划:
上海5.26-30日
北京5.16-30日
2012年05月09日 06点05分 2
1