Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home ISACA CISA

ISACA CISA Exam Practice Questions (P. 3)

  • Full Access (1824 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #21
Which of the following is the PRIMARY role of the IS auditor in an organization's information classification process?
  1. A
    Securing information assets in accordance with the classification assigned
  2. B
    Validating that assets are protected according to assigned classification
  3. C
    Ensuring classification levels align with regulatory guidelines
  4. D
    Defining classification levels for information assets within the organization

Correct Answer:
B

Question #22
When evaluating whether the expected benefits of a project have been achieved, it is MOST important for an IS auditor to review:
  1. A
    the project schedule.
  2. B
    quality assurance (QA) results.
  3. C
    post-implementation issues.
  4. D
    the business case

Correct Answer:
D

Question #23
Which of the following is the MOST important reason for IS auditors to perform post-implementation reviews for critical IT projects?
  1. A
    To determine whether vendors should be paid for project deliverables
  2. B
    To provide the audit committee with an assessment of project team performance
  3. C
    To provide guidance on the financial return on investment (ROI) of projects
  4. D
    To determine whether the organization's objectives were met as expected

Correct Answer:
D

Question #24
Which of the following BEST indicates that an incident management process is effective?
  1. A
    Decreased number of calls to the help desk
  2. B
    Increased number of incidents reviewed by IT management
  3. C
    Decreased time for incident resolution
  4. D
    Increased number of reported critical incidents

Correct Answer:
C

Question #25
Which of the following MOST effectively minimizes downtime during system conversions?
  1. A
    Phased approach
  2. B
    Parallel run
  3. C
    Direct cutover
  4. D
    Pilot study

Correct Answer:
B

Question #26
Which of the following would MOST effectively ensure the integrity of data transmitted over a network?
  1. A
    Message encryption
  2. B
    Steganography
  3. C
    Certificate authority (CA)
  4. D
    Message digest

Correct Answer:
D

Question #27
Which of the following would be MOST useful to an IS auditor assessing the effectiveness of IT resource planning?
  1. A
    Budget execution status
  2. B
    A capacity analysis of IT operations
  3. C
    A succession plan for key IT personnel
  4. D
    A list of new applications to be implemented

Correct Answer:
B

Question #28
An IS auditor is evaluating controls for monitoring the regulatory compliance of a third party that provides IT services to the organization. Which of the following should be the auditor's GREATEST concern?
  1. A
    A gap analysis against regulatory requirements has not been conducted.
  2. B
    The third-party disclosed a policy-related issue of noncompliance.
  3. C
    The organization has not reviewed the third party's policies and procedures.
  4. D
    The organization has not communicated regulatory requirements to the third party.

Correct Answer:
D

Question #29
Which of the following is an audit reviewer's PRIMARY role with regard to evidence?
  1. A
    Ensuring appropriate statistical sampling methods were used
  2. B
    Ensuring evidence is labeled to show it was obtained from an approved source
  3. C
    Ensuring unauthorized individuals do not tamper with evidence after it has been captured
  4. D
    Ensuring evidence is sufficient to support audit conclusions

Correct Answer:
D

Question #30
When an intrusion into an organization's network is detected, which of the following should be done FIRST?
  1. A
    Contact law enforcement.
  2. B
    Identify nodes that have been compromised.
  3. C
    Block all compromised network nodes.
  4. D
    Notify senior management

Correct Answer:
B

Previous Questions Next Questions

All Pages