CISA Data Management and Database Controls

Question 1

Which database concept ensures that a transaction is either fully completed or fully rolled back, preventing partial updates that could corrupt data integrity?

Accepted Answer

Atomicity

Answer

Consistency

Answer

Isolation

Answer

Durability

Question 2

A CISA auditor reviewing database security should verify that database administrators (DBAs) are PREVENTED from:

Accepted Answer

Accessing application data they administer without authorization

Answer

Performing routine maintenance tasks

Answer

Creating backup jobs

Answer

Monitoring database performance

Question 3

Which data management control MOST effectively ensures that data has not been altered during storage or transmission?

Accepted Answer

Hash-based integrity checks

Answer

Data encryption

Answer

Data masking

Answer

Data compression

Question 4

When auditing database access controls, a CISA auditor should confirm that the principle of least privilege is applied by verifying:

Accepted Answer

Users are granted only the minimum access required for their job function

Answer

All users have DBA-level access for flexibility

Answer

Shared service accounts are used to simplify management

Answer

Read access is unrestricted to improve productivity

Question 5

Which technique protects sensitive data in non-production environments by replacing real values with realistic but fictitious data?

Accepted Answer

Data masking

Answer

Encryption

Answer

Tokenization

Answer

Data archiving

Question 6

A CISA auditor finds that database audit logging is disabled. The MOST significant risk this creates is:

Accepted Answer

Inability to detect or investigate unauthorized data access or modification

Answer

Decreased database performance

Answer

Increased storage consumption

Answer

Slower query response times