CISA—Certified Information Systems Auditor - Part 130

1. Right Answer: D
Explanation: A before-and-after maintenance report is the best answer because a visual review would provide the most positive verification that updating was proper.

2. Right Answer: A
Explanation: A blackbox test is a dynamic analysis tool for testing software modules. During the testing of software modules, a blackbox test works first in a cohesive manner as one single unit/entity, consisting of numerous modules and second, with the user data that flows across software modules. In some cases, this even drives the software behavior. In choices B, C and D, the software (design or code) remains static and someone closely examines it by applying their mind, without actually activating the software. Therefore, these cannot be referred to as dynamic analysis tools.

3. Right Answer: A
Explanation: A BPR project more often leads to an increased number of people using technology, and this would be a cause for concern. Incorrect answers:B. As BPR is often technology oriented, and this technology is usually more complex and volatile than in the past, cost savings do not often materialize in this area.D. There is no reason for IP to conflict with a BPR project, unless the project is not run properly.

4. Right Answer: B
Explanation: A bridge connects two separate networks to form a logical network (e.g., joining an Ethernet and token network) and has the storage capacity to store frames and act as a storage and forward device. Bridges operate at the OSI data link layer by examining the media access control header of a data packet.

5. Right Answer: A
Explanation: A callback feature hooks into the access control software and logs all authorized and unauthorized access attempts, permitting the follow-up and further review of potential breaches. Call forwarding (choice D) is a means of potentially bypassing callback control. By dialing through an authorized phone number from an unauthorized phone number, a perpetrator can gain computer access. This vulnerability can be controlled through callback systems that are available.