ISACA CISA Certified Information Systems Auditor Exam Questions and Answers - 21 - Page 8 of 10

The latest ISACA CISA (Certified Information Systems Auditor) certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the ISACA CISA exam and earn ISACA CISA certification.

ISACA Certified Information Systems Auditor (CISA) Exam Questions and Answers

CISA Question 2271

Question

As an IS auditor it is very important to understand the importance of job scheduling. Which of the following statement is NOT true about job scheduler or job scheduling software?

A. Job information is set up only once, which increase the probability of an error.
B. Records are maintained of all job success and failures.
C. Reliance on operator is reduced.
D. Job dependencies are defined so that if a job fails, subsequent jobs relying on its output will not be processed.

Answer

A. Job information is set up only once, which increase the probability of an error.

Explanation

The NOT keyword is used in this question. You need to find out an option which is not true about job scheduling.
Below are some advantages of job scheduling or using job scheduling software:

Job information is set up only once, reduce the probability of an error.
Records are maintained of all job success and failures.
Reliance on operator is reduced.
Job dependencies are defined so that if a job fails, subsequent jobs relying on its output will not be processed.

For your exam you should know the information below:
A job scheduler is a computer application for controlling unattended background program execution (commonly called batch processing).
Synonyms are batch system, Distributed Resource Management System (DRMS), and Distributed Resource Manager (DRM). Today’s job schedulers, often termed workload automation, typically provide a graphical user interface and a single point of control for definition and monitoring of background executions in a distributed network of computers. Increasingly, job schedulers are required to orchestrate the integration of real-time business activities with traditional background IT processing across different operating system platforms and business application environments.
Job scheduling should not be confused with process scheduling, which is the assignment of currently running processes to CPUs by the operating system.

Basic features expected of job scheduler software include:

Interfaces which help to define workflows and/or job dependencies automatic submission of executions interfaces to monitor the executions priorities and/or queues to control the execution order of unrelated jobs
If software from a completely different area includes all or some of those features, this software is consider to have job scheduling capabilities.
Most operating systems (such as Unix and Windows) provide basic job scheduling capabilities, for example: croon. Web hosting services provide job scheduling capabilities through a control panel or a webcron solution. Many programs such as DBMS, backup, ERPs, and BPM also include relevant job-scheduling capabilities. Operating system (“OS”) or point program supplied job-scheduling will not usually provide the ability to schedule beyond a single OS instance or outside the remit of the specific program.
Organizations needing to automate unrelated IT workload may also leverage further advanced features from a job scheduler, such as: real-time scheduling based on external, unpredictable events automatic restart and recovery in event of failures alerting and notification to operations personnel generation of incident reports audit trails for regulatory compliance purposes

The following answers are incorrect: The other options are correctly defined about job scheduling

CISA Question 2272

Question

Which of the following term in business continuity defines the total amount of time that a business process can be disrupted without causing any unacceptable consequences?

A. RPO
B. RTO
C. WRT
D. MTD

Answer

D. MTD

Explanation

The sum of RTO and WRT is defined as the Maximum Tolerable Downtime (MTD) which defines the total amount of time that a business process can be disrupted without causing any unacceptable consequences. This value should be defined by the business management team or someone like CTO, CIO or IT manager.

For your exam you should know below information about RPO, RTO, WRT and MTD:

Stage 1: Business as usual

At this stage all systems are running production and working correctly.

Stage 2: Disaster occurs

On a given point in time, disaster occurs and systems needs to be recovered. At this point the Recovery Point Objective (RPO) determines the maximum acceptable amount of data loss measured in time. For example, the maximum tolerable data loss is 15 minutes.

Stage 3: Recovery

At this stage the system are recovered and back online but not ready for production yet. The Recovery Time Objective (RTO) determines the maximum tolerable amount of time needed to bring all critical systems back online. This covers, for example, restore data from back-up or fix of a failure. In most cases this part is carried out by system administrator, network administrator, storage administrator etc.

Stage 4: Resume Production

At this stage all systems are recovered, integrity of the system or data is verified and all critical systems can resume normal operations. The Work Recovery Time (WRT) determines the maximum tolerable amount of time that is needed to verify the system and/or data integrity. This could be, for example, checking the databases and logs, making sure the applications or services are running and are available. In most cases those tasks are performed by application administrator, database administrator etc. When all systems affected by the disaster are verified and/or recovered, the environment is ready to resume the production again.

The following answers are incorrect:
RPO – Recovery Point Objective (RPO) determines the maximum acceptable amount of data loss measured in time. For example, the maximum tolerable data loss is 15 minutes.
RTO – The Recovery Time Objective (RTO) determines the maximum tolerable amount of time needed to bring all critical systems back online.
This covers, for example, restore data from back-up or fix of a failure. In most cases this part is carried out by system administrator, network administrator, storage administrator etc.
WRT – The Work Recovery Time (WRT) determines the maximum tolerable amount of time that is needed to verify the system and/or data integrity. This could be, for example, checking the databases and logs, making sure the applications or services are running and are available. In most cases those tasks are performed by application administrator, database administrator etc. When all systems affected by the disaster are verified and/or recovered, the environment is ready to resume the production again.

CISA Question 2273

Question

Which of the following term in business continuity determines the maximum tolerable amount of time that is needed to verify the system and/or data integrity?

A. RPO
B. RTO
C. WRT
D. MTD

Answer

C. WRT

Explanation

The Work Recovery Time (WRT) determines the maximum tolerable amount of time that is needed to verify the system and/or data integrity.
This could be, for example, checking the databases and logs, making sure the applications or services are running and are available. In most cases those tasks are performed by application administrator, database administrator etc. When all systems affected by the disaster are verified and/or recovered, the environment is ready to resume the production again.

For your exam you should know below information about RPO, RTO, WRT and MTD:

Stage 1: Business as usual

At this stage all systems are running production and working correctly.

Stage 2: Disaster occurs

Stage 3: Recovery

Stage 4: Resume Production

The following answers are incorrect:
RPO – Recovery Point Objective (RPO) determines the maximum acceptable amount of data loss measured in time. For example, the maximum tolerable data loss is 15 minutes.
RTO – The Recovery Time Objective (RTO) determines the maximum tolerable amount of time needed to bring all critical systems back online.
This covers, for example, restore data from back-up or fix of a failure. In most cases this part is carried out by system administrator, network administrator, storage administrator etc.
MTD – The sum of RTO and WRT is defined as the Maximum Tolerable Downtime (MTD) which defines the total amount of time that a business process can be disrupted without causing any unacceptable consequences. This value should be defined by the business management team or someone like CTO, CIO or IT manager.

CISA Question 2274

Question

Which of the following term in business continuity determines the maximum tolerable amount of time needed to bring all critical systems back online after disaster occurs?

A. RPO
B. RTO
C. WRT
D. MTD

Answer

B. RTO

Explanation

The recovery time objective (RTO) is the duration of time and a service level within which a business process must be restored after a disaster (or disruption) in order to avoid unacceptable consequences associated with a break in business continuity.
It can include the time for trying to fix the problem without a recovery, the recovery itself, testing, and the communication to the users. Decision time for users representative is not included.
The business continuity timeline usually runs parallel with an incident management timeline and may start at the same, or different, points.
In accepted business continuity planning methodology, the RTO is established during the Business Impact Analysis (BIA) by the owner of a process (usually in conjunction with the business continuity planner). The RTOs are then presented to senior management for acceptance.
The RTO attaches to the business process and not the resources required to support the process.
The RTO and the results of the BIA in its entirety provide the basis for identifying and analyzing viable strategies for inclusion in the business continuity plan.
Viable strategy options would include any which would enable resumption of a business process in a time frame at or near the RTO. This would include alternate or manual workaround procedures and would not necessarily require computer systems to meet the RTOs.

For your exam you should know below information about RPO, RTO, WRT and MTD :

Stage 1: Business as usual

At this stage all systems are running production and working correctly.

Stage 2: Disaster occurs

Stage 3: Recovery

Stage 4: Resume Production

The following answers are incorrect:
RPO – Recovery Point Objective (RPO) determines the maximum acceptable amount of data loss measured in time. For example, the maximum tolerable data loss is 15 minutes.
WRT – The Work Recovery Time (WRT) determines the maximum tolerable amount of time that is needed to verify the system and/or data integrity. This could be, for example, checking the databases and logs, making sure the applications or services are running and are available. In most cases those tasks are performed by application administrator, database administrator etc. When all systems affected by the disaster are verified and/or recovered, the environment is ready to resume the production again.
MTD – The sum of RTO and WRT is defined as the Maximum Tolerable Downtime (MTD) which defines the total amount of time that a business process can be disrupted without causing any unacceptable consequences. This value should be defined by the business management team or someone like CTO, CIO or IT manager.

CISA Question 2275

Question

Which of the following term in business continuity determines the maximum acceptable amount of data loss measured in time?

A. RPO
B. RTO
C. WRT
D. MTD

Answer

A. RPO

Explanation

A recovery point objective, or “RPO”, is defined by business continuity planning. It is the maximum tolerable period in which data might be lost from an IT service due to a major incident. The RPO gives systems designers a limit to work to. For instance, if the RPO is set to four hours, then in practice, off-site mirrored backups must be continuously maintained – a daily off-site backup on tape will not suffice. Care must be taken to avoid two common mistakes around the use and definition of RPO. Firstly, BC staff use business impact analysis to determine RPO for each service – RPO is not determined by the existent backup regime.
Secondly, when any level of preparation of off-site data is required, rather than at the time the backups are offsite, the period during which data is lost very often starts near the time of the beginning of the work to prepare backups which are eventually offsite.

For your exam you should know below information about RPO, RTO, WRT and MTD:

Stage 1: Business as usual

At this stage all systems are running production and working correctly.

Stage 2: Disaster occurs

Stage 3: Recovery

Stage 4: Resume Production

The following answers are incorrect:
RTO – The Recovery Time Objective (RTO) determines the maximum tolerable amount of time needed to bring all critical systems back online.
This covers, for example, restore data from back-up or fix of a failure. In most cases this part is carried out by system administrator, network administrator, storage administrator etc.
WRT – The Work Recovery Time (WRT) determines the maximum tolerable amount of time that is needed to verify the system and/or data integrity. This could be, for example, checking the databases and logs, making sure the applications or services are running and are available. In most cases those tasks are performed by application administrator, database administrator etc. When all systems affected by the disaster are verified and/or recovered, the environment is ready to resume the production again.
MTD – The sum of RTO and WRT is defined as the Maximum Tolerable Downtime (MTD) which defines the total amount of time that a business process can be disrupted without causing any unacceptable consequences. This value should be defined by the business management team or someone like CTO, CIO or IT manager.

CISA Question 2276

Question

Which of the following term related to network performance refers to the number of corrupted bits expressed as a percentage or fraction of the total sent?

A. Bandwidth
B. Throughput
C. Latency
D. Error Rate

Answer

D. Error Rate

Explanation

Error rate is the number of corrupted bits expressed as a percentage or fraction of the total sent.

For your exam you should know below information about Network performance:
Network performance refers to measurement of service quality of a telecommunications product as seen by the customer.

The following list gives examples of network performance measures for a circuit-switched network and one type of packet-switched network (ATM):

Circuit-switched networks: In circuit switched networks, network performance is synonymous with the grade of service. The number of rejected calls is a measure of how well the network is performing under heavy traffic loads. Other types of performance measures can include noise, echo and so on.

ATM: In an Asynchronous Transfer Mode (ATM) network, performance can be measured by line rate, quality of service (QoS), data throughput, connect time, stability, technology, modulation technique and modem enhancements.

There are many different ways to measure the performance of a network, as each network is different in nature and design. Performance can also be modeled instead of measured; one example of this is using state transition diagrams to model queuing performance in a circuit-switched network. These diagrams allow the network planner to analyze how the network will perform in each state, ensuring that the network will be optimally designed.

The following measures are often considered important:
Bandwidth – Bandwidth is commonly measured in bits/second is the maximum rate that information can be transferred
Throughput – Throughput is the actual rate that information is transferred
Latency – Latency is the delay between the sender and the receiver decoding it, this is mainly a function of the signals travel time, and processing time at any nodes the information traverses
Jitter – Jitter is the variation in the time of arrival at the receiver of the information
Error Rate – Error rate is the number of corrupted bits expressed as a percentage or fraction of the total sen

The following answers are incorrect:
Bandwidth – Bandwidth is commonly measured in bits/second is the maximum rate that information can be transferred
Throughput – Throughput is the actual rate that information is transferred
Latency – Latency is the delay between the sender and the receiver decoding it, this is mainly a function of the signals travel time, and processing time at any nodes the information traverses

CISA Question 2277

Question

Which of the following term related to network performance refers to the variation in the time of arrival of packets on the receiver of the information?

A. Bandwidth
B. Throughput
C. Latency
D. Jitter

Answer

D. Jitter

Explanation

Simply said, the time difference in packet inter-arrival time to their destination can be called jitter. Jitter is specific issue that normally exists in packet switched networks and this phenomenon is usually not causing any communication problems. TCP/IP is responsible for dealing with the jitter impact on communication.
On the other hand, in VoIP network environment, or better say in any bigger environment today where we use IP phones on our network this can be a bigger problem. When someone is sending VoIP communication at a normal interval (let’s say one frame every 10 ms) those packets can stuck somewhere in between inside the packet network and not arrive at expected regular peace to the destined station. That’s the whole jitter phenomenon all about so we can say that the anomaly in tempo with which packet is expected and when it is in reality received is jitter.

In this image above, you can notice that the time it takes for packets to be send is not the same as the period in which they will arrive on the receiver side. One of the packets encounters some delay on his way and it is received little later than it was assumed. Here are the jitter buffers entering the story. They will mitigate packet delay if required. VoIP packets in networks have very changeable packet inter-arrival intervals because they are usually smaller than normal data packets and are therefore more numerous with bigger chance to get some delay along the way.

For your exam you should know below information about Network performance:
Network performance refers to measurement of service quality of a telecommunications product as seen by the customer.

The following list gives examples of network performance measures for a circuit-switched network and one type of packet-switched network (ATM):

CISA Question 2278

Question

Which of the following term related to network performance refers to the delay that packet may experience on their way to reach the destination from the source?

A. Bandwidth
B. Throughput
C. Latency
D. Jitter

Answer

C. Latency

Explanation

Latency the delay between the sender and the receiver decoding it, this is mainly a function of the signals travel time, and processing time at any nodes the information traverses.
In a network, latency, a synonym for delay, is an expression of how much time it takes for a packet of data to get from one designated point to another. In some usages (for example, AT&T), latency is measured by sending a packet that is returned to the sender and the round-trip time is considered the latency.

The latency assumption seems to be that data should be transmitted instantly between one point and another (that is, with no delay at all). The contributors to network latency include:

Propagation: This is simply the time it takes for a packet to travel between one place and another at the speed of light.
Transmission: The medium itself (whether optical fiber, wireless, or some other) introduces some delay. The size of the packet introduces delay in a round trip since a larger packet will take longer to receive and return than a short one.
Router and other processing: Each gateway node takes time to examine and possibly change the header in a packet (for example, changing the hop count in the time-to-live field).
Other computer and storage delays: Within networks at each end of the journey, a packet may be subject to storage and hard disk access delays at intermediate devices such as switches and bridges. (In backbone statistics, however, this kind of latency is probably not considered.)

For your exam you should know below information about Network performance:
Network performance refers to measurement of service quality of a telecommunications product as seen by the customer.

The following list gives examples of network performance measures for a circuit-switched network and one type of packet-switched network (ATM):

The following answers are incorrect:
Bandwidth – Bandwidth is commonly measured in bits/second is the maximum rate that information can be transferred
Throughput – Throughput is the actual rate that information is transferred
Jitter – Jitter is the variation in the time of arrival at the receiver of the information

CISA Question 2279

Question

Which of the following term related to network performance refers to the actual rate that information is transferred over a network?

A. Bandwidth
B. Throughput
C. Latency
D. Jitter

Answer

B. Throughput

Explanation

Throughput the actual rate that information is transferred. In data transmission, throughput is the amount of data moved successfully from one place to another in a given time period.

For your exam you should know below information about Network performance:
Network performance refers to measurement of service quality of a telecommunications product as seen by the customer.

The following list gives examples of network performance measures for a circuit-switched network and one type of packet-switched network (ATM):

The following answers are incorrect:
Bandwidth – Bandwidth is commonly measured in bits/second is the maximum rate that information can be transferred
Latency – Latency is the delay between the sender and the receiver decoding it, this is mainly a function of the signals travel time, and processing time at any nodes the information traverses
Jitter – Jitter is the variation in the time of arrival at the receiver of the information

CISA Question 2280

Question

Which of the following term related to network performance refers to the maximum rate that information can be transferred over a network?

A. Bandwidth
B. Throughput
C. Latency
D. Jitter

Answer

A. Bandwidth

Explanation

In computer networks, bandwidth is often used as a synonym for data transfer rate – it is the amount of data that can be carried from one point to another in a given time period (usually a second).
This kind of bandwidth is usually expressed in bits (of data) per second (bps). Occasionally, it’s expressed as bytes per second (Bps). A modem that works at 57,600 bps has twice the bandwidth of a modem that works at 28,800 bps. In general, a link with a high bandwidth is one that may be able to carry enough information to sustain the succession of images in a video presentation.
It should be remembered that a real communications path usually consists of a succession of links, each with its own bandwidth. If one of these is much slower than the rest, it is said to be a bandwidth bottleneck.

For your exam you should know below information about Network performance:
Network performance refers to measurement of service quality of a telecommunications product as seen by the customer.

The following list gives examples of network performance measures for a circuit-switched network and one type of packet-switched network (ATM):

The following answers are incorrect:
Throughput – Throughput is the actual rate that information is transferred
Latency – Latency is the delay between the sender and the receiver decoding it, this is mainly a function of the signals travel time, and processing time at any nodes the information traverses
Jitter – Jitter is the variation in the time of arrival at the receiver of the information