Question 751 · 1459 in bank
The PRIMARY role of a control self-assessment (CSA) facilitator is to:
Show answer
Answer: B
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
The PRIMARY role of a control self-assessment (CSA) facilitator is to:
Answer: B
A data analytics team has developed a process automation bot for internal audit that scans user access to all servers in the environment and then randomly selects a sample of new users for testing. Which of the following presents the GREATEST concern with this approach?
Answer: C
The correct answer is C : By randomly selecting a sample of new users based solely on user access to all servers in the environment, the bot may not be capturing all relevant data for the audit. This may result in a biased sample that does not accurately represent the entire population of new users. Without maintaining evidence of population completeness, the auditor cannot be confident that the results of the audit are representative and reliable.
Source: Adapted from community discussion — 007Georgeo
What is the MOST critical finding when reviewing an organization's information security management?
Answer: A
The operations team of an organization has reported an IS security attack. Which of the following should be the FIRST step for the security incident response team?
Answer: C
A company converted its payroll system from an external service to an internal package. Payroll processing in April was run in parallel. To validate the completeness of data after the conversion, which of the following comparisons from the old to the new system would be MOST effective?
Answer: C
Answer: C This comparison helps verify that the data from the old system has been accurately transferred to the new system and that no employee data has been omitted during the conversion process.
Source: Adapted from community discussion — a84n
Following an IS audit, which of the following types of risk would be MOST critical to communicate to key stakeholders?
Answer: D
residual risk would be the most critical type of risk to communicate to stakeholders as it represents the risk that remains after controls have been implemented
Source: Adapted from community discussion — 007Georgeo
An organization has installed blade server technology in its data center. To determine whether higher cooling demands are maintained, which of the following should the IS auditor review?
Answer: A
The use of control totals reduces the risk of:
Answer: D
Which of the following is the GREATEST risk if two users have concurrent access to the same database record?
Answer: D
The greatest risk if two users have concurrent access to the same database record is Data Integrity. This is because concurrent access to the same record can lead to conflicts and inconsistencies in the data, resulting in data being lost or corrupted. Data integrity is the assurance that the data stored in the database is accurate, consistent, and reliable.
Source: Adapted from community discussion — tapsshore
When an intrusion into an organization's network is detected, which of the following should be done FIRST?
Answer: B
I believe identifying the compromised nodes comes before taking action to block it. So in my view , B is the best answer.
Source: Adapted from community discussion — macksonj
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 751. 1459 questions available.
Version 1.0.0. How we source questions