- (Exam Topic 4)
A core system fails a week after a scheduled update, causing an outage that impacts service. Which of the following is MOST important for incident management to focus on when addressing the issue?

1. A. Analyzing the root cause of the outage to ensure the incident will not reoccur
2. B. Restoring the system to operational state as quickly as possible
3. C. Ensuring all resolution steps are fully documented prior to returning the system to service
4. D. Rolling back the unsuccessful change to the previous state

Correct Answer: B

- (Exam Topic 4)
Which of the following should be restricted from a network administrator's privileges in an adequately segregated IT environment?

1. A. Monitoring network traffic
2. B. Changing existing configurations for applications
3. C. Hardening network ports
4. D. Ensuring transmission protocols are functioning correctly

Correct Answer: B
The network administrator should not have the privilege of changing existing configurations for applications in an adequately segregated IT environment. This is because changes to existing configurations can introduce vulnerabilities and cause unexpected behavior, which can lead to disruption of services or data loss. The network administrator should not have the ability to make such changes without the explicit authorization of the IT manager. Additionally, the network administrator should be monitored to ensure that any changes they make are in compliance with the organization's security policies and procedures. CISA Certification - Information Systems Auditor official site or book provides a comprehensive guide to best practices and security principles for the IT environment, which includes recommendations on how to restrict access to sensitive configuration changes.

- (Exam Topic 1)
An IS auditor has found that an organization is unable to add new servers on demand in a cost-efficient manner. Which of the following is the auditor's BEST recommendation?

1. A. Increase the capacity of existing systems.
2. B. Upgrade hardware to newer technology.
3. C. Hire temporary contract workers for the IT function.
4. D. Build a virtual environment.

Correct Answer: D

- (Exam Topic 2)
Which of the following is MOST important for an IS auditor to verify when evaluating an organization's firewall?

1. A. Logs are being collected in a separate protected host
2. B. Automated alerts are being sent when a risk is detected
3. C. Insider attacks are being controlled
4. D. Access to configuration files Is restricted.

Correct Answer: A

- (Exam Topic 4)
Which of the following provides the MOST useful information regarding an organization's risk appetite and tolerance?

1. A. Gap analysis
2. B. Audit reports
3. C. Risk profile
4. D. Risk register

Correct Answer: C