CISA practice questions 841–850

1. Question 841 · 1459 in bank

   Which of the following should be an IS auditor's GREATEST concern when reviewing an organization's security controls for policy compliance?

   • ASecurity policies are not applicable across all business units.
   • BEnd users are not required to acknowledge security policy training.
   • CThe security policy has not been reviewed within the past year.
   • DSecurity policy documents are available on a public domain website.

   Show answer

   Answer: A

   Explanation

   No having security policy in some business units is a great concern. Security policies do not necessarily have to be reviewed on a yearly basis.

   Source: Adapted from community discussion — JonnyBGood

   Next question

2. Question 842 · 1459 in bank

   Which of the following should be the PRIMARY basis for prioritizing follow-up audits?

   • AAudit cycle defined in the audit plan
   • BRecommendation from executive management
   • CResidual risk from the findings of previous audits
   • DComplexity of management's action plans

   Show answer

   Answer: C

   Next question

3. Question 843 · 1459 in bank

   Which of the following should be an IS auditor's GREATEST consideration when scheduling follow-up activities for agreed-upon management responses to remediate audit observations?

   • AIT budgeting constraints
   • BAvailability of responsible IT personnel
   • CRisk rating of original findings
   • DBusiness interruption due to remediation

   Show answer

   Answer: C

   Next question

4. Question 844 · 1459 in bank

   Which of the following is the MOST useful information for an IS auditor to review when formulating an audit plan for the organization's outsourced service provider?

   • AService level agreement (SLA) reports
   • BThe service provider's control self-assessment (CSA)
   • CThe organization's procurement policy
   • DIndependent audit reports

   Show answer

   Answer: D

   Next question

5. Question 845 · 1459 in bank

   Which of the following should be the MOST important consideration when prioritizing the funding for competing IT projects?

   • ASkills and capabilities within the project management team
   • BQuality and accuracy of the IT project inventory
   • CCriteria used to determine the benefits of projects
   • DSenior management preferences

   Show answer

   Answer: C

   Next question

6. Question 846 · 1459 in bank

   Which of the following is the MOST important consideration when investigating a security breach of an e-commerce application?

   • ASkill set of the response team
   • BChain of custody
   • CNotifications to law enforcement
   • DProcedures to analyze evidence

   Show answer

   Answer: B

   Next question

7. Question 847 · 1459 in bank

   Which of the following indicates that an internal audit organization is structured to support the independence and clarity of the reporting process?

   • AThe internal audit manager has a reporting line to the audit committee.
   • BThe internal audit manager reports functionally to a senior management official.
   • CAuditors are responsible for assessing and operating a system of internal controls.
   • DAuditors are responsible for performing operational duties or activities.

   Show answer

   Answer: A

   Next question

8. Question 848 · 1459 in bank

   Which of the following would BEST protect the confidentiality of sensitive data in transit between multiple offices?

   • ADigital signatures
   • BPublic key infrastructure (PKI)
   • CHash algorithms
   • DKerberos

   Show answer

   Answer: B

   Next question

9. Question 849 · 1459 in bank

   Which of the following is MOST likely to ensure that an organization's systems development meets its business objectives?

   • ABusiness owner involvement
   • BA project plan with clearly identified requirements
   • CA focus on strategic projects
   • DSegregation of systems development and testing

   Show answer

   Answer: A

   Explanation

   I vote A. The most likely to ensure the system development meets its business objective is the involvement of business owner. The project plan with clearly identified requirements required the involvement of business owner as well. Hence, i vote for A.

   Source: Adapted from community discussion — MichaelHoang

   Next question

10. Question 850 · 1459 in bank

    Which of the following security measures will reduce the risk of propagation when a cyberattack occurs?

    • AData loss prevention (DLP) system
    • BPerimeter firewall
    • CNetwork segmentation O Web application firewall

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 841. 1459 questions available.