Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
During a review of IT service desk practices, an IS auditor notes that help desk personnel are spending more time fulfilling user requests for password resets than resolving critical incidents. Which of the following recommendations to IT management would BEST address this situation?
Answer: D
In a controlled application development environment, the MOST important segregation of duties should be between the person who implements changes into the production environment and the:
Answer: A
In a controlled application development environment, the MOST important segregation of duties should be between the person who implements changes into the production environment and the **quality assurance (QA) personnel**. The reason is that the QA personnel are responsible for ensuring that changes to the application have been properly tested and approved before they are implemented in the production environment. This segregation of duties helps to ensure that changes to the application are properly authorized, tested, and implemented in a controlled manner to minimize the risk of errors or fraud. The other options (application programmer, computer operator, and systems programmer) may also have important roles in the development and implementation process, but they are not as critical to ensuring the integrity and security of the application as the QA personnel.
Source: Adapted from community discussion — NDUBU
During which phase of a system development project should key performance indicators (KPIs) be established?
Answer: A
An organization wants to change its project methodology to address increasing costs and process changes. Which of the following is the BEST methodology to use?
Answer: A
A USB device containing sensitive production data was lost by an employee, and its contents were subsequently found published online. Which of the following controls is the BEST recommendation to prevent a similar recurrence?
Answer: B
During an IT operations audit, multiple unencrypted backup tapes containing sensitive credit card information cannot be found. Which of the following presents the GREATEST risk to the organization?
Answer: C
An organization uses multiple offsite data center facilities. Which of the following is MOST important to consider when choosing related backup devices and media?
Answer: B
Standardization ensures that all data centers use the same hardware and software for backups. This makes managing and maintaining the backup systems much easier, as there is only one type of system to support. It also ensures that backups can be restored at any data center, regardless of where they were originally taken, which is crucial for disaster recovery. The issue pertains to multiple offsite facilities, not heavy storage issues.
Source: Adapted from community discussion — dan08
Which of the following is MOST important to determine when conducting a post-implementation review?
Answer: B
While reviewing an organization's business continuity plan (BCP), an IS auditor observes that a recently developed application is not included. The IS auditor should:
Answer: A
Data anonymization helps to prevent which types of attacks in a big data environment?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 781. 1459 questions available.
Version 1.0.0. How we source questions