Question 1031 · 1459 in bank
Which of the following is the PRIMARY purpose for external assessments of internal audit's quality assurance (QA) systems and frameworks?
Show answer
Answer: B
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is the PRIMARY purpose for external assessments of internal audit's quality assurance (QA) systems and frameworks?
Answer: B
Which of the following would be the MOST significant factor when choosing among several backup system alternatives with different restoration speeds?
Answer: C
The restoration speed of a backup system directly influences the organization's ability to meet its RTO. A backup solution with faster restoration speeds can help minimize downtime and ensure that critical systems and data are recovered within the specified RTO. While the Recovery Point Objective (RPO) (option B) is also an important consideration in backup system selection, it primarily relates to the acceptable data loss tolerance in the event of a disruption, rather than the speed of system restoration.
Source: Adapted from community discussion — Swallows
Which of the following should be the FIRST step in the incident response process for a suspected breach?
Answer: D
Before taking any further steps in responding to a suspected breach, it is critical first to confirm whether a breach has indeed occurred. This involves researching and investigating the alert to ascertain its validity. D is the answer
Source: Adapted from community discussion — babadook13
Which of the following procedures for testing a disaster recovery plan (DRP) is MOST effective?
Answer: D
Which of the following measures BEST mitigates the risk of exfiltration during a cyberattack?
Answer: D
Cant be A. They are already within the system and try to take out data... Perimeter FW can't do nothing about it. D is the correct
Source: Adapted from community discussion — cidigi
Which of the following is the MAIN risk associated with adding a new system functionality during the development phase without following a project change management process?
Answer: A
Which of the following is the GREATEST risk associated with the lack of an effective data privacy program?
Answer: A
Which of the following is the BEST methodology to use for estimating the complexity of developing a large business application?
Answer: D
Answer D FBA considers various aspects of the software, such as inputs, outputs, inquiries, files, and interfaces, and assigns numeric values to these elements. By quantifying the functionality of the application, function point analysis provides a standardized measure that can be used to estimate the effort, resources, and cost required for development.
Source: Adapted from community discussion — a84n
Which of the following is the MOST important responsibility of user departments associated with program changes?
Answer: D
D. Approving changes before implementation The most important responsibility of user departments associated with program changes is approving changes before implementation (Option D). User departments need to ensure that the proposed changes align with business requirements, comply with regulations, and are properly tested. Their approval helps prevent unauthorized or poorly planned changes from being implemented, reducing the risk of system errors and disruptions.
Source: Adapted from community discussion — lsiau76
Which of the following findings should be of GREATEST concern to an IS auditor performing a review of IT operations?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 1031. 1459 questions available.
Version 1.0.0. How we source questions