Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
An IS auditor is reviewing a project that involves creating a secure mobile app for claims processing. As part of a security-in-development model for the program, threat modeling should begin during which project phase?
Answer: D
An IS auditor determines elevated administrator accounts for servers that are not properly checked out and then back in after each use. Which of the following is the MOST appropriate sampling technique to determine the scope of the problem?
Answer: D
During a closing meeting, the IT manager disagrees with a valid audit finding presented by the IS auditor and requests the finding be excluded from the final report. Which of the following is the auditor's BEST course of action?
Answer: B
Which of the following provides the BEST estimate of the complexity associated with a software development project for a web-based application?
Answer: A
Which of the following controls BEST mitigates the risk associated with password compromise?
Answer: B
During preparation for an IS audit of an organization's IT security processes, which of the following documents would BEST enable the IS auditor to understand the ownership of specific operational tasks?
Answer: B
An IS auditor identifies that an accounts payable clerk has direct access to a payment file after it has been generated. The MOST significant risk to the organization is that payments may be:
Answer: C
When reviewing hard disk utilization reports, an IS auditor observes that utilization is routinely above 95%. Which of the following should be the GREATEST concern to the IS auditor?
Answer: A
An IS auditor is tasked with reviewing an organization's purchase invoices to discover fictitious entries that may have been created as part of a suspected fraud scheme. Which of the following is the MOST effective data analysis technique for this situation?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 1451. 1459 questions available.
Version 1.0.0. How we source questions