CISA practice questions 31–40

1. Question 31 · 1459 in bank

   Which of the following BEST enables an organization to manage unexpected or on-request jobs?

   • AService level agreements (SLAs)
   • BJob scheduling software
   • CJob scheduling by the service desk
   • DConsole logs

   Show answer

   Answer: B

   Explanation

   B. Job scheduling software Job scheduling software is specifically designed to manage and automate the scheduling of various tasks and jobs, including unexpected or on-request jobs. It provides flexibility and control over when and how these jobs are executed, making it the best option among the choices listed for effectively managing such tasks.

   Source: Adapted from community discussion — SuperMax

   Next question

2. Question 32 · 1459 in bank

   When protecting mobile devices, which of the following is the PRIMARY risk mitigated by authentication controls?

   • ASoftware updates
   • BData availability and integrity
   • CInternal or external security breaches
   • DIT service failure

   Show answer

   Answer: C

   Explanation

   Authentication controls on mobile devices primarily mitigate the risk of internal or external security breaches. Authentication is the process of verifying the identity of a user, ensuring that only authorized individuals can access the device and its data.

   Source: Adapted from community discussion — FAGFUR

   Next question

3. Question 33 · 1459 in bank

   Which of the following BEST helps to ensure data integrity across system interfaces?

   • AReconciliations
   • BEnvironment segregation
   • CAccess controls
   • DSystem backups

   Show answer

   Answer: A

   Explanation

   A. Reconciliations helps ensure data integrity across system interfaces by ensuring that data transfers between systems are consistent and complete. The purpose of reconciliations is to compare data from two different sources and ensure that the information matches. This helps to identify any discrepancies or errors in the data and ensure that the data is accurate and consistent. In the event of a data mismatch, reconciliations can be used to identify the cause of the error and make the necessary corrections to ensure data integrity. By ensuring that data transfers between systems are accurate and complete, reconciliations help to maintain the overall integrity of the organization's information systems.

   Source: Adapted from community discussion — survivalkit

   Next question

4. Question 34 · 1459 in bank

   During a review of an organization’s technology policies, which of the following observations should be of MOST concern to the IS auditor?

   • ABusiness objectives are not defined.
   • BLegal requirements are not considered.
   • CA globally acknowledged framework is not used.
   • DThe policies have not been reviewed within the last three years.

   Show answer

   Answer: B

   Explanation

   B. Legal requirements are not considered. Ensuring that an organization’s technology policies align with legal requirements and regulations is crucial for compliance and risk management. Neglecting legal requirements can lead to legal consequences, financial penalties, and reputational damage. While the other observations are also important, compliance with legal obligations is typically a top priority for IS auditors.

   Source: Adapted from community discussion — SuperMax

   Next question

5. Question 35 · 1459 in bank

   Which of the following provides a new IS auditor with the MOST useful information to evaluate overall IT performance?

   • APrior audit reports
   • BIT balanced scorecard
   • CVulnerability assessment report
   • DIT value analysis

   Show answer

   Answer: B

   Explanation

   The IT balanced scorecard is likely to provide the most useful information for a new IS auditor to evaluate overall IT performance due to its comprehensive and balanced approach to measuring performance across various dimensions.

   Source: Adapted from community discussion — FAGFUR

   Next question

6. Question 36 · 1459 in bank

   Which risk response has been adopted by a risk owner postponing the implementation of proper controls due to budget constraints?

   • ATransfer
   • BAcceptance
   • CAvoidance
   • DMitigation

   Show answer

   Answer: B

   Explanation

   Where the implementation of controls is postponed due to budget constraints, the risk owner is essentially accepting the risk, as active measures to address it are deferred.

   Source: Adapted from community discussion — FAGFUR

   Next question

7. Question 37 · 1459 in bank

   Before the release of a new application into an organization's production environment, which of the following should be in place to ensure that proper testing has occurred and rollback plans are in place?

   • AIndependent third-party approval
   • BStandardized change requests
   • CSecure code review
   • DChange approval board

   Show answer

   Answer: D

   Explanation

   Before the release of a new application into an organization's production environment, having a Change Approval Board in place is important to ensure that proper testing has occurred and rollback plans are in place. The CAB is responsible for reviewing and approving changes to the IT environment, including new applications or updates, to ensure that they meet quality standards and do not adversely impact the production environment.

   Source: Adapted from community discussion — FAGFUR

   Next question

8. Question 38 · 1459 in bank

   Which of the following BEST describes the role of the IS auditor in a control self-assessment (CSA)?

   • AImplementer
   • BApprover
   • CReviewer
   • DFacilitator

   Show answer

   Answer: D

   Explanation

   The best description of the role of the IS auditor in a Control Self-Assessment (CSA) is a "Facilitator". In a CSA, the IS auditor facilitates the process rather than actively implementing, approving, or reviewing controls.

   Source: Adapted from community discussion — FAGFUR

   Next question

9. Question 39 · 1459 in bank

   Which of the following is the BEST indication that there are potential problems within an organization's IT service desk function?

   • ALack of key performance indicators (KPIs)
   • BAn excessive backlog of user requests
   • CUndocumented operating procedures
   • DLack of segregation of duties

   Show answer

   Answer: B

   Explanation

   An excessive backlog of user requests is often a strong indication that there may be potential problems within an organization's IT service desk function. A backlog suggests that the service desk may be struggling to keep up with the volume of user requests, leading to delays in issue resolution and a potential decrease in customer satisfaction. Monitoring and managing the backlog is crucial for ensuring that the IT service desk is operating efficiently and meeting user needs in a timely manner.

   Source: Adapted from community discussion — FAGFUR

   Next question

10. Question 40 · 1459 in bank

    Which of the following is the PRIMARY objective of cyber resiliency?

    • ATo efficiently and effectively recover from an incident with limited operational impact
    • BTo prevent potential attacks or disruptions in operations
    • CTo limit the severity of security breaches and maintain continuous operations
    • DTo resume normal operations after service disruptions

    Show answer

    Answer: C

    Explanation

    The PRIMARY objective of cyber resiliency is to limit the severity of security breaches and maintain continuous operations. Cyber resiliency involves not only recovering from incidents but also proactively planning and implementing measures to prevent, detect, respond to, and recover from cyber threats. It focuses on the organization's ability to adapt to and recover from adverse cyber events while maintaining essential functions and minimizing the impact on operations.

    Source: Adapted from community discussion — FAGFUR

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 31. 1459 questions available.