A forensic investigation involves personal data of employees from multiple countries. The legal team is concerned about cross-border data transfer regulations. What should the forensic team do to ensure compliance?

Proceed with the investigation without considering data transfer laws

Transfer all data to a central location for analysis

Anonymize all personal data before analysis

Consult with legal counsel to understand jurisdictional requirements

Which method is commonly used to detect security incidents by analyzing network traffic for malicious patterns?

Intrusion Detection System (IDS)

During a security incident, the incident response team needs to make a critical decision to disconnect a major business application from the network to contain the threat. The decision will cause significant operational downtime. According to best practices, who should have the authority to approve this action?

The business unit owner or executive management

The incident response team lead

Certified Information Systems Auditor

Domain 5Objective 6

Incident Response and Forensics CISA Practice Questions (Page 6)

Part of the Protection of Information Assets domain, which accounts for 26% of the CISA exam.

41questions here

9free pages

12concepts

26%of the exam

12 Concepts in This Objective

Incident Response Lifecycle
Incident Classification and Triage
Incident Response Roles and Responsibilities
Incident Response Procedures and Playbooks
Incident Detection and Reporting
Containment, Eradication, and Recovery Strategies
Evidence Collection and Handling
Forensic Imaging and Data Acquisition
Forensic Analysis and Examination
Forensic Tools and Techniques
Legal and Regulatory Considerations in Forensics
Documentation and Reporting of Forensic Findings

Questions 26–30

26application · medium
A forensic investigation involves personal data of employees from multiple countries. The legal team is concerned about cross-border data transfer regulations. What should the forensic team do to ensure compliance?
Select an answer first
27foundation · easy
Which stakeholder group is MOST likely to be responsible for communicating with external parties, such as law enforcement and the media, during an incident?
Select an answer first
28foundation · easy
Which method is commonly used to detect security incidents by analyzing network traffic for malicious patterns?
Select an answer first
29application · medium
During a security incident, the incident response team needs to make a critical decision to disconnect a major business application from the network to contain the threat. The decision will cause significant operational downtime. According to best practices, who should have the authority to approve this action?
Select an answer first
30foundation · easy
Which forensic tool is specifically designed to analyze network traffic and capture packets for evidence?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CISA” is a trademark of its owner, used for identification only.

Incident Response and Forensics CISA Practice Questions (Page 6)

Questions 26–30

A forensic investigation involves personal data of employees from multiple countries. The legal team is concerned about cross-border data transfer regulations. What should the forensic team do to ensure compliance?

Which stakeholder group is MOST likely to be responsible for communicating with external parties, such as law enforcement and the media, during an incident?

Which method is commonly used to detect security incidents by analyzing network traffic for malicious patterns?

Which forensic tool is specifically designed to analyze network traffic and capture packets for evidence?

Keep studying — Protection of Information Assets