Question 681 · 1459 in bank
What is the MAIN purpose of an organization's internal IS audit function?
Show answer
Answer: A
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
What is the MAIN purpose of an organization's internal IS audit function?
Answer: A
Which of the following is the MOST important reason for IS auditors to perform post-implementation reviews for critical IT projects?
Answer: D
Following a recent internal data breach, an IS auditor was asked to evaluate information security practices within the organization. Which of the following findings would be MOST important to report to senior management?
Answer: B
Should be B. Users dont need to know about security and databases... They need to be aware of how to maintain their passwords etc.. via awareness training
Source: Adapted from community discussion — Hhssuyy
A business unit cannot achieve desired segregation of duties between operations and programming due to size constraints. Which of the following is MOST important for the IS auditor to identify?
Answer: B
The BEST way to determine whether programmers have permission to alter data in the production environment is by reviewing:
Answer: A
Several unattended laptops containing sensitive customer data were stolen from personnel offices. Which of the following would be an IS auditor's BEST recommendation to protect data in case of recurrence?
Answer: D
Encrypting the disk drive (option D) would be the best recommendation for an IS auditor to protect sensitive customer data in case of recurrence. Encrypting the disk drive ensures that even if the laptops are stolen, the data stored on them remains inaccessible without the encryption key. This adds an extra layer of security to protect the confidentiality of the information. While requiring the use of cable locks (option B) can prevent physical theft to some extent, it doesn't safeguard the data itself in case the theft does occur.
Source: Adapted from community discussion — Swallows
When classifying information, it is MOST important to align the classification to:
Answer: A
Isn't the usual classification is High, Mid, and Low? These are all relating to risks right. When classifying information, the most important consideration is to align the classification to business risk. Information classification involves categorizing data based on its level of sensitivity and importance.
Source: Adapted from community discussion — dan08
An organization's information security department has recently created a centralized governance model to ensure that network-related findings are remediated within the service level agreement (SLA). What should the IS auditor use to assess the maturity and capability of this governance model?
Answer: D
The performance, risks, and capabilities of an IT infrastructure are BEST measured using a:
Answer: D
To develop meaningful recommendations for findings, which of the following is MOST important for an IS auditor to determine and understand?
Answer: D
I think it's D too. "Root cause analysis is the process of diagnosis to establish the origins of events (root causes). Once identified, the root causes can then be used to develop needed controls to accurately address these root causes that lead to system failures and deficiencies. Furthermore, root cause analysis also enables an organization to learn from consequences, typically from errors and problems, in the effort to not repeat undesired actions or results"
Source: Adapted from community discussion — hamrori
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 681. 1459 questions available.
Version 1.0.0. How we source questions