CISA practice questions 581–590

1. Question 581 · 1459 in bank

   To ensure the effectiveness of project risk management, when should the project risk register be reviewed and updated?

   • ADuring the design phase of the project
   • BDuring the planning phase of the project
   • CAt the end of each phase of the project
   • DThroughout the lifetime of the project

   Show answer

   Answer: D

   Next question

2. Question 582 · 1459 in bank

   An organization is implementing a data loss prevention (DLP) system in response to a new regulatory requirement. Reviewing which of the following would be MOST helpful in evaluating the system’s design?

   • ASystem manuals
   • BEnterprise architecture (EA)
   • CHistorical record of data breaches
   • DIndustry trends

   Show answer

   Answer: B

   Next question

3. Question 583 · 1459 in bank

   Which of the following is MOST useful for determining the strategy for IT portfolio management?

   • AIT metrics dashboards
   • BIT roadmap
   • CCapability maturity model
   • DLife cycle cost-benefit analysis

   Show answer

   Answer: D

   Next question

4. Question 584 · 1459 in bank

   Which of the following recommendations would BEST prevent the implementation of IT projects without collaborating with the business?

   • APartner with the business units to evaluate IT projects.
   • BReview the projects to identify similarities and eliminate duplication.
   • CPeriodically review the projects’ return on investment (ROI).
   • DPrioritize projects based on business and IT resource availability.

   Show answer

   Answer: A

   Next question

5. Question 585 · 1459 in bank

   Which of the following would be the GREATEST concern during a financial statement audit?

   • AA backup has not been identified for key approvers.
   • BSystem capacity has not been tested.
   • CThe procedures for generating key reports have not been approved.
   • DThe financial management system is cloud based.

   Show answer

   Answer: C

   Next question

6. Question 586 · 1459 in bank

   An IS auditor has validated that an organization’s IT department runs several low-priority automated tasks. Which of the following is the BEST recommendation for an automated job schedule?

   • ALow-priority jobs should be avoided.
   • BLow-priority jobs should include the major functions.
   • CLow-priority jobs should be provided with optimal resources.
   • DLow-priority jobs should be scheduled subject to resource availabilty.

   Show answer

   Answer: D

   Next question

7. Question 587 · 1459 in bank

   An organization is implementing a new data loss prevention (DLP) tool. Which of the following will BEST enable the organization to reduce false positive alerts?

   • AUsing the default policy and tool rule sets
   • BDeploying the tool in monitor mode
   • CReducing the number of detection points
   • DConfiguring a limited set of rules

   Show answer

   Answer: D

   Next question

8. Question 588 · 1459 in bank

   Which of the following is an example of shadow IT?

   • AAn employee using a cloud-based order management tool without approval from IT
   • BAn employee using a company-provided laptop to access personal banking information
   • CAn employee using personal email to communicate with clients without approval from IT
   • DAn employee using a company-provided tablet to access social media during work hours

   Show answer

   Answer: A

   Next question

9. Question 589 · 1459 in bank

   Which of the following BEST enables an organization to determine the effectiveness of its information security awareness program?

   • AMeasuring user satisfaction with the quality of the training
   • BEvaluating the results of a social engineering exercise
   • CReviewing security staff performance evaluations
   • DPerforming an analysis of the number of help desk calls

   Show answer

   Answer: B

   Next question

10. Question 590 · 1459 in bank

    An organization has decided to reengineer business processes to improve the performance of overall IT service delivery. Which of the following recommendations from the project team should be the GREATEST concern to the IS auditor?

    • ADisable operational logging to enhance the processing speed and save storage.
    • BAdopt a service delivery model based on insights from peer organizations.
    • CDelegate business decisions to the chief risk officer (CRO).
    • DEliminate certain reports and key performance indicators (KPIs).

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 581. 1459 questions available.