CA Foundation Business Economics Questions 2023 - Part 32
Fri, 03 Mar 2023
Inspirational journeys
Follow the stories of academics and their research expeditions
CISA—Certified Information Systems Auditor - Part 306
1. A firm is considering using biometric fingerprint identification on all PCs that access critical datA. This requires:
A) that a registration process is executed for all accredited PC users.
B) the full elimination of the risk of a false acceptance.
C) the usage of the fingerprint reader be accessed by a separate password.
D) assurance that it will be impossible to gain unauthorized access to critical data.
2. Which of the following biometrics has the highest reliability and lowest false-acceptance rate (FAR)?
A) Palm scan
B) Face recognition
C) Retina scan
D) Hand geometry
3. The MOST likely explanation for a successful social engineering attack is:
A) that computers make logic errors.
B) that people make judgment errors.
C) the computer knowledge of the attackers.
D) the technological sophistication of the attack method.
4. The purpose of a deadman door controlling access to a computer facility is primarily to:
A) prevent piggybacking.
B) prevent toxic gases from entering the data center.
C) starve a fire of oxygen.
D) prevent an excessively rapid entry to, or exit from, the facility.
5. Which of the following is the MOST reliable form of single factor personal identification?
A) Smart card
B) Password
C) Photo identification
D) iris scan
A) that a registration process is executed for all accredited PC users.
B) the full elimination of the risk of a false acceptance.
C) the usage of the fingerprint reader be accessed by a separate password.
D) assurance that it will be impossible to gain unauthorized access to critical data.
2. Which of the following biometrics has the highest reliability and lowest false-acceptance rate (FAR)?
A) Palm scan
B) Face recognition
C) Retina scan
D) Hand geometry
3. The MOST likely explanation for a successful social engineering attack is:
A) that computers make logic errors.
B) that people make judgment errors.
C) the computer knowledge of the attackers.
D) the technological sophistication of the attack method.
4. The purpose of a deadman door controlling access to a computer facility is primarily to:
A) prevent piggybacking.
B) prevent toxic gases from entering the data center.
C) starve a fire of oxygen.
D) prevent an excessively rapid entry to, or exit from, the facility.
5. Which of the following is the MOST reliable form of single factor personal identification?
A) Smart card
B) Password
C) Photo identification
D) iris scan
1. Right Answer: A
Explanation: The fingerprints of accredited users need to be read, identified and recorded, i.e., registered, before a user may operate the system from the screened PCs.Choice B is incorrect, as the false- acceptance risk of a biometric device may be optimized, but will never be zero because this would imply an unacceptably high risk of false rejection. Choice C is incorrect, as the fingerprint device reads the token (the user's fingerprint) and does not need to be protected in itself by a password. Choice Dis incorrect because the usage of biometric protection on PCs does not guarantee that other potential security weaknesses in the system may not be exploited to access protected data.
2. Right Answer: C
Explanation: Retina scan uses optical technology to map the capillary pattern of an eye's retina. This is highly reliable and has the lowest false-acceptance rate (FAR) among the current biometric methods. Use of palm scanning entails placing a hand on a scanner where a palm's physical characteristics are captured. Hand geometry, one of the oldest techniques, measures the physical characteristics of the user's hands and fingers from a three dimensional perspective. The palm and hand biometric techniques lack uniqueness in the geometry data. In face biometrics, a reader analyzes the images captured for general facial characteristics. Though considered a natural and friendly biometric, the main disadvantage of face recognition is the lack of uniqueness, which means that people looking alike can fool the device.
3. Right Answer: B
Explanation: Humans make errors in judging others; they may trust someone when, in fact, the person is untrustworthy. Driven by logic, computers make the same error every time they execute the erroneous logic; however, this is not the basic argument in designing a social engineering attack. Generally, social engineering attacks do not require technological expertise; often, the attacker is not proficient in information technology or systems. Social engineering attacks are human-based and generally do not involve complicated technology.
4. Right Answer: A
Explanation: The purpose of a deadman door controlling access to a computer facility is primarily intended to prevent piggybacking. Choices B and C could be accomplished with a single self-closing door. Choice D is invalid, as a rapid exit may be necessary in some circumstances, e.g., a fire.
5. Right Answer: D
Explanation: Since no two irises are alike, identification and verification can be done with confidence. There is no guarantee that a smart card is being used by the correct person since it can be shared, stolen or lost and found. Passwords can be shared and, if written down, carry the risk of discovery.Photo IDs can be forged or falsified.
Explanation: The fingerprints of accredited users need to be read, identified and recorded, i.e., registered, before a user may operate the system from the screened PCs.Choice B is incorrect, as the false- acceptance risk of a biometric device may be optimized, but will never be zero because this would imply an unacceptably high risk of false rejection. Choice C is incorrect, as the fingerprint device reads the token (the user's fingerprint) and does not need to be protected in itself by a password. Choice Dis incorrect because the usage of biometric protection on PCs does not guarantee that other potential security weaknesses in the system may not be exploited to access protected data.
2. Right Answer: C
Explanation: Retina scan uses optical technology to map the capillary pattern of an eye's retina. This is highly reliable and has the lowest false-acceptance rate (FAR) among the current biometric methods. Use of palm scanning entails placing a hand on a scanner where a palm's physical characteristics are captured. Hand geometry, one of the oldest techniques, measures the physical characteristics of the user's hands and fingers from a three dimensional perspective. The palm and hand biometric techniques lack uniqueness in the geometry data. In face biometrics, a reader analyzes the images captured for general facial characteristics. Though considered a natural and friendly biometric, the main disadvantage of face recognition is the lack of uniqueness, which means that people looking alike can fool the device.
3. Right Answer: B
Explanation: Humans make errors in judging others; they may trust someone when, in fact, the person is untrustworthy. Driven by logic, computers make the same error every time they execute the erroneous logic; however, this is not the basic argument in designing a social engineering attack. Generally, social engineering attacks do not require technological expertise; often, the attacker is not proficient in information technology or systems. Social engineering attacks are human-based and generally do not involve complicated technology.
4. Right Answer: A
Explanation: The purpose of a deadman door controlling access to a computer facility is primarily intended to prevent piggybacking. Choices B and C could be accomplished with a single self-closing door. Choice D is invalid, as a rapid exit may be necessary in some circumstances, e.g., a fire.
5. Right Answer: D
Explanation: Since no two irises are alike, identification and verification can be done with confidence. There is no guarantee that a smart card is being used by the correct person since it can be shared, stolen or lost and found. Passwords can be shared and, if written down, carry the risk of discovery.Photo IDs can be forged or falsified.
Tags:
it certification certified it it exams isaca certification isaca cgeit isaca cisa isaca cism isaca cobit 5 isaca crisc isaca questions practice exams pratice quests risc maangement it management it questions isaca answers isaca practice isaca dumps isaca test test questions questins and answer explanation0 Comments
Categories
Recent posts
CA Foundation Business Economics Questions 2023 - Part 31
Fri, 03 Mar 2023
CA Foundation Business Economics Questions 2023 - Part 30
Fri, 03 Mar 2023
Leave a comment