Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is the BEST control to prevent the transfer of files to external parties through instant messaging (IM) applications?
Answer: B
I think answer is B because it's asking to prevent the transfer of files so it has to be stopped. Application level firewall should be able to do it.
Source: Adapted from community discussion — MunaM
Which of the following is the MOST important consideration for an IS auditor when assessing the adequacy of an organization's information security policy?
Answer: A
Which of the following is the GREATEST security risk associated with data migration from a legacy human resources (HR) system to a cloud-based system?
Answer: D
While differences in data formats between the source and target systems (option C) can pose challenges for data migration, they are typically addressed through data mapping and transformation processes, rather than representing the greatest security risk. The greatest security risk associated with data migration from a legacy HR system to a cloud-based system is usually related to data confidentiality and integrity during transmission.
Source: Adapted from community discussion — Swallows
An audit has identified that business units have purchased cloud-based applications without IT's support. What is the GREATEST risk associated with this situation?
Answer: B
An IS audit team is evaluating the documentation related to the most recent application user-access review performed by IT and business management. It is determined the user list was not system-generated. Which of the following should be the GREATEST concern?
Answer: A
CISA Review Manual pg. 395 - Reports generated from the system—These represent the data that management relies upon for business decisions and review of business results. Therefore, ensuring the integrity of data in reports is key for the reliability of information in information systems. An IS auditor should validate that the reports are accurate and provide correct representation of the source data.
Source: Adapted from community discussion — Ej24356
An IS auditor finds that one employee has unauthorized access to confidential data. The IS auditor's BEST recommendation should be to:
Answer: A
An IS department is evaluated monthly on its cost-revenue ratio, user satisfaction rate, and computer downtime. This is BEST characterized as an application of:
Answer: B
An IS auditor concludes that an organization has a quality security policy. Which of the following is MOST important to determine next? The policy must be:
Answer: B
An IS auditor is analyzing a sample of accesses recorded on the system log of an application. The auditor intends to launch an intensive investigation if one exception is found. Which sampling method would be appropriate?
Answer: B
An IS auditor discovers a box of hard drives in a secured location that are overdue for physical destruction. The vendor responsible for this task was never made aware of these hard drives. Which of the following is the BEST course of action to address this issue?
Answer: D
I believe B is correct. Before making any recommendation, the IS auditor should gain a good understanding of the scope of the problem and what factors caused this incident. The IS auditor should identify whether the issue was caused by managers not following procedures, or by a problem with the workflow of the automated system or a combination of the two.
Source: Adapted from community discussion — Infysenthil
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 1051. 1459 questions available.
Version 1.0.0. How we source questions