Question 621 · 1459 in bank
Which of the following is MOST useful to an IS auditor performing a review of access controls for a document management system?
Show answer
Answer: D
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is MOST useful to an IS auditor performing a review of access controls for a document management system?
Answer: D
External audits have identified recurring exceptions in the user termination process, despite similar internal audits having reported no exceptions in the past. Which of the following is the IS auditor’s BEST course of action to improve the internal audit process in the future?
Answer: B
Which of the following is the BEST metric to measure the quality of software developed in an organization?
Answer: C
An IS auditor is preparing for a review of controls associated with a manufacturing plant’s implementation of industrial internet of Things (IoT) infrastructure. Which of the following vulnerabilities would present the GREATEST security risk to the organization?
Answer: C
What is the BEST control to address SQL injection vulnerabilities?
Answer: B
SQL injection is a technique used by attackers to inject malicious SQL code into database queries, resulting in unauthorized access to databases and information leakage. This vulnerability occurs when input data is not properly validated.
Source: Adapted from community discussion — Swallows
When testing the accuracy of transaction data, which of the following situations BEST justifies the use of a smaller sample size?
Answer: D
An IS auditor reviewing an organization’s IT systems finds that the organization frequently purchases systems that are incompatible with the technologies already in the organization. Which of the following is the MOST likely reason?
Answer: A
Which of the following staff should an IS auditor interview FIRST to obtain a general overview of the various technologies used across different programs?
Answer: C
Which of the following controls helps to ensure that data extraction queries run by the database administrator (DBA) are monitored?
Answer: D
In a typical network architecture used for e-commerce, a load balancer is normally found between the:
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 621. 1459 questions available.
Version 1.0.0. How we source questions