CISA Data Management and Privacy Controls 2

Question 1

Which US regulation primarily governs the privacy and security of health information held by covered entities and their business associates?

Accepted Answer

HIPAA (Health Insurance Portability and Accountability Act)

Answer

HIPAA's Privacy and Security Rules set standards for protecting individually identifiable health information (PHI) in the US.

Question 2

An IS auditor reviewing data backup controls should PRIMARILY verify that:

Accepted Answer

Backups are tested regularly to confirm successful restoration

Answer

An untested backup provides no guarantee of recovery; regular restoration tests confirm data integrity and process reliability.

Question 3

Which of the following is the PRIMARY control to ensure data integrity in a database?

Accepted Answer

Implementing referential integrity constraints and input validation

Answer

Referential integrity constraints and input validation prevent invalid data from entering the database and maintain consistency between related tables.

Question 4

A data owner is BEST described as:

Accepted Answer

The business executive accountable for the data and its appropriate use

Answer

The data owner is a business-side role accountable for defining data classification, access requirements, and appropriate use policies.

Question 5

Which of the following BEST describes the purpose of a data loss prevention (DLP) solution?

Accepted Answer

To detect and prevent unauthorized transmission of sensitive data outside the organization

Answer

DLP tools inspect content in motion, at rest, and in use to identify and block unauthorized exfiltration of sensitive information.

CISA - Certified Information Systems Auditor Practice Test

CISA - Certified Information Systems Auditor Practice Test

CISA Data Management and Privacy Controls 2