Question 451 · 1459 in bank
An organization has both an IT strategy committee and an IT steering committee. When reviewing the minutes of the IT steering committee, an IS auditor would expect to find that the committee:
Show answer
Answer: A
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
An organization has both an IT strategy committee and an IT steering committee. When reviewing the minutes of the IT steering committee, an IS auditor would expect to find that the committee:
Answer: A
An IS auditor learns that a business owner violated the organization's security policy by creating a web page with access to production data. The auditor's NEXT step should be to:
Answer: A
The GREATEST benefit of using a prototyping approach in software development is that it helps to:
Answer: B
is anyone checking the correct answers here? I found a lot of inconsistencies. This will lead people to fail the exam big time.
Source: Adapted from community discussion — cidigi
An organization seeks to control costs related to storage media throughout the information life cycle while still meeting business and regulatory requirements. Which of the following is the BEST way to achieve this objective?
Answer: D
answer is D Implementing a data retention policy is the best way for an organization to control costs related to storage media throughout the information life cycle while still meeting business and regulatory requirements. A data retention policy specifies how long certain types of data should be retained and when it can be deleted or destroyed. By following a data retention policy, an organization can ensure that it is retaining only the data that it is required to keep and can avoid the cost of storing unnecessary data. Options A, B, and C may help to control costs related to storage media, but they do not address the issue of meeting business and regulatory requirements.
Source: Adapted from community discussion — nickchen
Which of the following will BEST ensure that archived electronic information of permanent importance remains accessible over time?
Answer: A
Which of the following practices is MOST helpful in eliminating potential bias during the vendor proposal review process?
Answer: A
Procurement professionals are trained to manage vendor relationships impartially and ensure a standardized process. By serving as the single point of contact, they help ensure that all vendors receive the same information and that communications are handled consistently.
Source: Adapted from community discussion — 4dfe785
Management has agreed to move the organization's data center due to recent flood map changes in its current location. Which risk response has been adopted?
Answer: B
An IS auditor is reviewing a recent security incident and is seeking information about the approval of a recent modification to a database system's security settings. Where would the auditor MOST likely find this information?
Answer: B
End users with read access to a central database can extract data to their desktops for analysis and reporting to management. What should be the GREATEST concern with this situation?
Answer: B
Which of the following is the PRIMARY benefit of using a SIEM tool to collate high amounts of data collected across various security tools?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 451. 1459 questions available.
Version 1.0.0. How we source questions