Question 1161 · 1459 in bank
Which of the following should be the MOST important consideration when conducting a review of IT portfolio management?
Show answer
Answer: D
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following should be the MOST important consideration when conducting a review of IT portfolio management?
Answer: D
What is the BEST method to determine if IT resource spending is aligned with planned project spending?
Answer: C
EVA is a project management technique that provides an objective measurement of a project's performance in terms of cost and schedule. It integrates the project scope, schedule, and cost elements to determine how well a project is progressing. EVA enables organizations to determine if IT resource spending is aligned with planned project spending by comparing the actual cost and schedule performance against the planned cost and schedule performance.
Source: Adapted from community discussion — 3008
An IS auditor is reviewing the release management process for an in-house software development solution. In which environment is the software version MOST likely to be the same as production?
Answer: B
Should be Testing which is C. The staging environment (option B) is often used as an intermediate environment for final testing and validation before moving to production. While it should closely resemble the production environment, there may still be slight differences or specific configurations in the staging environment that are not present in production.
Source: Adapted from community discussion — JONESKA
Which of the following would BEST help to ensure that potential security issues are considered by the development team as part of incremental changes to agile- developed software?
Answer: D
The waterfall life cycle model of software development is BEST suited for which of the following situations?
Answer: B
Which of the following is the GREATEST impact as a result of the ongoing deterioration of a detective control?
Answer: A
while option B (Decreased effectiveness of root cause analysis) could also be a consequence of deteriorating detective controls, it typically follows after the detection phase. If the detective control fails to detect incidents accurately (leading to increased false negatives), it undermines the ability to conduct effective root cause analysis because incidents are missed or not properly logged. Therefore, the deterioration of detective controls primarily impacts the accuracy and reliability of incident detection, resulting in an increased number of false negatives in security logs. This makes option A the correct answer.
Source: Adapted from community discussion — Swallows
A proper audit trail of changes to server start-up procedures would include evidence of:
Answer: B
This would involve tracking any manual interventions or changes made by operators to the server start-up procedures, which is important for accountability and ensuring the integrity of the system.
Source: Adapted from community discussion — Swallows
Which of the following is the BEST way to determine whether a test of a disaster recovery plan (DRP) was successful?
Answer: A
If enabled within firewall rules, which of the following services would present the GREATEST risk?
Answer: A
FTP is inherently less secure compared to other protocols like HTTP because it transfers data, including credentials, in plaintext. This makes it vulnerable to interception and unauthorized access. Therefore, enabling FTP within firewall rules could expose sensitive information to potential attackers.
Source: Adapted from community discussion — Swallows
Which of the following would BEST facilitate the successful implementation of an IT-related framework?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 1161. 1459 questions available.
Version 1.0.0. How we source questions