Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
An IS auditor has been asked to perform an assurance review of an organization's mobile computing security. To ensure the organization is able to centrally manage mobile devices to protect against data disclosure, it is MOST important for the auditor to determine whether:
Answer: B
An IS auditor has been asked to perform a post-implementation assessment of a new corporate human resources (HR) system. Which of the following control areas would be MOST important to review for the protection of employee information?
Answer: B
An external IS auditor has been engaged to determine the organization's cybersecurity posture. Which of the following is MOST useful for this purpose?
Answer: A
An IS auditor is evaluating an organization's IT strategy and plans. Which of the following would be of GREATEST concern?
Answer: A
An IS audit reveals that an organization is not proactively addressing known vulnerabilities. Which of the following should the IS auditor recommend the organization do FIRST?
Answer: C
C. Assess the security risks to the business. When an IS audit reveals that an organization is not proactively addressing known vulnerabilities, the IS auditor should recommend that the organization assess the security risks to the business (Option C) as the first step. Understanding the potential impact of vulnerabilities on the organization's operations, data, and overall security posture is crucial. This assessment will help prioritize vulnerability remediation efforts, allocate resources effectively, and ensure that vulnerabilities are addressed in a risk-informed manner.
Source: Adapted from community discussion — lsiau76
An IS auditor reviewing the threat assessment for a data center would be MOST concerned if:
Answer: C
An IS auditor observes that exceptions have been approved for an organization's information security policy. Which of the following is MOST important for the auditor to confirm?
Answer: A
Exceptions are breaches in the internal controls , and residual risks are not mitigated by the internal controls as they still remain after the controls so exceptions will not wok for them A is the answer
Source: Adapted from community discussion — Joloms
A senior auditor is reviewing work papers prepared by a junior auditor indicating that a finding was removed after the auditee said they corrected the problem. Which of the following is the senior auditor's MOST appropriate course of action?
Answer: B
B.. Removing the findings is not a way. Findings at the inception of audit should be reported alogwith any corrective actions if taken. since the question is of most appropriate action B could be the correct answer.
Source: Adapted from community discussion — Deeplaxmi
An IS auditor finds that while an organization's IT strategy is heavily focused on research and development, the majority of projects in the IT portfolio focus on operations and maintenance. Which of the following is the BEST recommendation?
Answer: C
Which of the following documents should specify roles and responsibilities within an IT audit organization?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 1121. 1459 questions available.
Version 1.0.0. How we source questions