Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
The application systems quality assurance (QA) function should:
Answer: B
Answer: B Ensuring adherence to standards is the core responsibility of QA to maintain consistency, reliability, and performance across applications.
Source: Adapted from community discussion — a84n
An organization has begun using social media to communicate with current and potential clients. Which of the following should be of PRIMARY concern to the auditor?
Answer: B
An organization is developing data classification standards and has asked internal audit for advice on aligning the standards with best practices. Internal audit would MOST likely recommend the standards should be:
Answer: C
Option C (risk assessment): This is the CORRECT answer. A risk assessment comprehensively identifies and evaluates potential threats to the organization's data. By understanding the risks, the organization can create data classification standards that prioritize data based on its sensitivity and potential impact if compromised. This ensures proper security measures are implemented for the most critical data.
Source: Adapted from community discussion — KAP2HURUF
An organization considers implementing a system that uses a technology that is not in line with the organization's IT strategy. Which of the following is the BEST justification for deviating from the IT strategy?
Answer: D
None of the options provided are the BEST justification for deviating from the IT strategy. Deviating from the IT strategy should only be done after careful consideration of the potential risks, costs, and benefits. The decision should be based on a sound business case that outlines the potential benefits, costs, and risks of implementing the new technology.
Source: Adapted from community discussion — 007Georgeo
An organization is running servers with critical business applications that are in an area subject to frequent but brief power outages. Knowledge of which of the following would allow the organization's management to monitor the ongoing adequacy of the uninterruptible power supply (UPS)?
Answer: A
To monitor the ongoing adequacy of a UPS protecting critical business servers, knowledge of the duration and interval of the power outages (Option A) is most crucial. Here's why: Duration: Knowing the maximum duration of power outages helps determine if the UPS has enough battery capacity to keep the servers running during those periods. Interval: Understanding the frequency and spacing between outages helps assess if the UPS has sufficient time to recharge its batteries fully before the next outage.
Source: Adapted from community discussion — KAP2HURUF
An organization implemented a cybersecurity policy last year. Which of the following is the GREATEST indicator that the policy may need to be revised?
Answer: D
When exceptions become more frequent, it suggests that the policy is not meeting the needs of the organization, and employees are finding ways to work around it. This may indicate that the policy is too strict, difficult to follow, or not aligned with business needs. As a result, the policy needs to be revised to better align with the needs of the organization while still providing adequate protection against cyber threats.
Source: Adapted from community discussion — 3008
An organization's enterprise architecture (EA) department decides to change a legacy system's components while maintaining its original functionality. Which of the following is MOST important for an IS auditor to understand when reviewing this decision?
Answer: A
A. The current business capabilities delivered by the legacy system: This is the MOST important consideration for an IS auditor because it relates directly to the organization's overall business objectives. The auditor should evaluate whether the proposed changes align with the organization's current business capabilities, processes, and workflows. They should also consider whether the changes will affect the system's ability to deliver the intended business value.
Source: Adapted from community discussion — 3008
A legacy application is running on an operating system that is no longer supported by the vendor. If the organization continues to use the current application, which of the following should be the IS auditor's GREATEST concern?
Answer: A
Increased cost of maintenance (Option C): While a valid concern, it's often a secondary consequence compared to the immediate security risk posed by zero-day vulnerabilities. Database updates (Option B): Depending on the specific architecture, database updates might still be possible even on an unsupported OS. However, it doesn't mitigate the security risks associated with the underlying operating system itself. License issues (Option D): While using unsupported software might violate license agreements, the immediate security risk posed by zero-day vulnerabilities is a more critical concern for an IS auditor.
Source: Adapted from community discussion — KAP2HURUF
A system development project is experiencing delays due to ongoing staff shortages. Which of the following strategies would provide the GREATEST assurance of system quality at implementation?
Answer: B
Terrible question. It depends much on the company's contex, and there is much missing information on that. How am I supposed to know that hiring staff will be approved? I real life that process usually takes several months and probably an ongoing project would delay anyway.
Source: Adapted from community discussion — analuisamoreira
When reviewing past results of a recurring annual audit, an IS auditor notes that findings may not have been reported and independence may not have been maintained. Which of the following IS the auditor's BEST course of action?
Answer: D
I don't know why isaca questions have to soo traumatic at times. I will go with D. Informing audit management is crucial because they are responsible for overseeing the audit function and ensuring that audit processes are conducted with integrity and independence.
Source: Adapted from community discussion — PurpleParrot
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 761. 1459 questions available.
Version 1.0.0. How we source questions