Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following should be of GREATEST concern to an IS auditor reviewing a report of an unsuccessful disaster recovery test?
Answer: C
C. The disaster recovery procedures are not up to date. Not A because the auditor is her to do the analysis so this not a concern.
Source: Adapted from community discussion — RS66
Which of the following should be done FIRST to protect evidence on a computer suspected to be involved in online fraud?
Answer: D
Which of the following BEST enables an organization to balance value delivery and risk management?
Answer: A
An IT governance framework integrates strategic planning, risk management, and performance measurement into a cohesive approach, making it the most effective method for balancing value delivery with risk management. Always think from ISACA's point of view.
Source: Adapted from community discussion — PurpleParrot
What is the PRIMARY benefit of an audit approach which requires reported findings to be issued together with related action plans, owners, and target dates?
Answer: A
Which of the following is MOST important for an IS auditor to review when an audit identifies that the business continuity plan (BCP) does not address scenarios involving extended system outages?
Answer: B
A disaster recovery plan (DRP) typically focuses on restoring IT infrastructure and systems after a disruption. If the BCP does not address scenarios involving extended system outages, it suggests a gap in continuity planning, particularly regarding IT systems. Reviewing the DRP is crucial to determine if it adequately addresses extended system outages and provides the necessary procedures and resources to recover IT systems within an acceptable timeframe.
Source: Adapted from community discussion — Swallows
An IS auditor is reviewing the backup procedures in an organization that has high volumes of data with frequent changes to transactions. Which of the following is the BEST backup scheme to recommend given the need for a shorter restoration time in the event of a disruption?
Answer: B
While incremental backup is faster for creating the backup, the question here is how to keep the restore time as short as possible. Differential backup is faster here. So I vote for B. Since the question is not which variant has the shortest restoration time, I rule out C. Otherwise, the ISACA questions would typically ask for best, fastest. With A. I think that with high data volumes, as is the case here, the resynchronization is slower than the bulk restores trimmed for speed with full and differential backups.
Source: Adapted from community discussion — 46080f2
Which of the following is an IS auditor’s BEST approach when low-risk anomalies have been identified?
Answer: B
B. Deprioritize further testing of the anomalies and refocus on issues with higher risk. B does not mean you will not document the anomalies. B is best approach.
Source: Adapted from community discussion — RS66
An organization plans to replace its nightly batch processing backup to magnetic tape with real-time replication to a second data center. Which of the following is the GREATEST risk associated with this change?
Answer: B
The GREATEST risk associated with replacing nightly batch processing backup with real-time replication is the potential inability to recover from cybersecurity attacks effectively. Real-time replication may replicate malicious activities in real-time, making it crucial to implement robust cybersecurity measures to protect both the primary and replicated data from cyber threats.
Source: Adapted from community discussion — Swallows
Which of the following is MOST helpful to a data owner when classifying the organization's data?
Answer: A
A. Risk assessment results. Responsibilities include identifying and classifying data based on associated risk... (page 247 - Cisa Study Guide 27th).
Source: Adapted from community discussion — MJORGER
Which of the following presents the GREATEST threat to an organization's entire virtual infrastructure?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 371. 1459 questions available.
Version 1.0.0. How we source questions