Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is the BEST way to sanitize a hard disk for reuse to ensure the organization's information cannot be accessed?
Answer: D
Degaussing involves demagnetizing the hard disk using a specialized degausser. It effectively deletes data, but it also renders the hard disk unusable for future use, which does not align with the requirement to "reuse" the disk.
Source: Adapted from community discussion — babadook13
Which of the following is the BEST indication of effective IT investment management?
Answer: A
Which of the following is MOST important with regard to an application development acceptance test?
Answer: A
A. User management approves the test design before the test is started. The most important aspect with regard to an application development acceptance test is that user management approves the test design before the test is started. Acceptance testing is primarily focused on ensuring that the application meets the business requirements and is fit for use by the end-users. Having user management approve the test design ensures that the acceptance criteria align with the business needs and expectations. This approval is crucial because it signifies that the test scenarios and expected outcomes are agreed upon by those who will ultimately use and benefit from the application. It also ensures that any issues related to the business processes are addressed before the application is deployed.
Source: Adapted from community discussion — KAP2HURUF
An organization is implementing a new system that supports a month-end business process. Which of the following implementation strategies would be MOST efficient to decrease business downtime?
Answer: D
To ensure downtime, running the new system in tandem (parallel) with the old one ensures the least downtime. It's common sense
Source: Adapted from community discussion — firel0rd
Which of the following should be of GREATEST concern to an IS auditor reviewing a network printer disposal process?
Answer: D
An IS auditor reviewing a network printer disposal process should be most concerned with the evidence available to verify that the hard drives of the printers have been sanitized prior to disposal. The hard drives of network printers may contain sensitive and confidential information, such as confidential documents, user credentials, or network configurations. If this information is not properly sanitized prior to disposal, it could be accessed by unauthorized individuals and potentially used for malicious purposes.
Source: Adapted from community discussion — survivalkit
Which of the following should be an IS auditor's GREATEST concern when an international organization intends to roll out a global data privacy policy?
Answer: C
C. Local regulations may contradict the policy. An IS auditor's greatest concern when an international organization intends to roll out a global data privacy policy should be local regulations that may contradict the policy. Data privacy laws vary from country to country and it is crucial for organizations to ensure that their data privacy policy complies with the relevant local regulations. If a global data privacy policy conflicts with local regulations, it may lead to legal and regulatory issues, and potentially cause harm to the organization's reputation. The IS auditor should be vigilant in checking that the policy is aligned with local regulations and provide recommendations to the organization on any necessary changes.
Source: Adapted from community discussion — TEC1
An IS auditor is conducting a physical security audit of a healthcare facility and finds closed-circuit television (CCTV) systems located in a patient care area. Which of the following is the GREATEST concern?
Answer: A
A - there are no notices indicating recording is in progress. It is important to inform patients and staff when CCTV systems are in use for recording. This will help to ensure that their privacy is not violated. Patients have the right to know when and why they are being recorded. Additionally, the facility must follow the legal requirements to inform individuals about the use of CCTV systems and obtain their consent.
Source: Adapted from community discussion — 007Georgeo
Which of the following is the BEST audit procedure to determine whether a firewall is configured in compliance with the organization's security policy?
Answer: C
Which of the following would BEST indicate the effectiveness of a security awareness training program?
Answer: C
The effectiveness of a security awareness training program is best indicated by: C. Results of third-party social engineering tests While all the options may provide some insights into the training program's effectiveness, the results of third-party social engineering tests are the most objective and direct measure of how well employees have internalized the training and are applying it to real-world situations. These tests simulate real-world security threats and assess whether employees are able to identify and respond to them appropriately, making it a robust indicator of the program's impact on reducing security risks. Employee satisfaction (Option A) and the number of employees completing training (Option D) can be useful metrics, but they may not necessarily correlate with improved security outcomes. Reduced unintentional violations (Option B) is a relevant metric as well, but it may not provide a comprehensive assessment of the program's effectiveness since it doesn't account for external threats that employees may face.
Source: Adapted from community discussion — SuperMax
An organization recently migrated its data warehouse from a legacy system to a different architecture in the cloud. Which of the following should be GREATEST concern to the IS auditor reviewing the new data architecture?
Answer: D
When reviewing a migration of a data warehouse from a legacy system to a different architecture in the cloud, the IS auditor should focus on aspects that have the greatest potential impact on data integrity, security, and overall system performance. Among the given options, the GREATEST concern is typically related to data quality and integrity, as this can have significant repercussions on the effectiveness and reliability of the data warehouse. Therefore, option D, "The data was not cleansed before moving from the source to the cloud data warehouse," is the most significant concern for the IS auditor. In summary, while all the options may be concerns to some extent, data quality and integrity (option D) typically have the most significant impact on the success of a data warehouse migration project.
Source: Adapted from community discussion — SuperMax
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 1261. 1459 questions available.
Version 1.0.0. How we source questions