Free CISA – Certified Information Systems Auditor Practice Test Question

Select an option, then click Submit answer.

• ○

  Require documentation that the finding will be addressed within the new system

• ○

  Schedule a meeting to discuss the issue with senior management

• ○

  Perform an ad hoc audit to determine if the vulnerability has been exploited

• ○

  Recommend the finding be resolved prior to implementing the new system

Select an option, then click Submit answer.

• ○

  security parameters are set in accordance with the manufacturer s standards.

• ○

  a detailed business case was formally approved prior to the purchase.

• ○

  security parameters are set in accordance with the organization's policies.

• ○

  the procurement project invited lenders from at least three different suppliers.

Select an option, then click Submit answer.

• ○

  risk framework

• ○

  balanced scorecard

• ○

  value chain analysis

• ○

  control self-assessment (CSA)

Select an option, then click Submit answer.

• ○

  Inability to close unused ports on critical servers

• ○

  Inability to identify unused licenses within the organization

• ○

  Inability to deploy updated security patches

• ○

  Inability to determine the cost of deployed software

Select an option, then click Submit answer.

• ○

  Analyze whether predetermined test objectives were met.

• ○

  Perform testing at the backup data center.

• ○

  Evaluate participation by key personnel.

• ○

  Test offsite backup files.

Select an option, then click Submit answer.

• ○

  Data encryption on the mobile device

• ○

  Complex password policy for mobile devices

• ○

  The triggering of remote data wipe capabilities

• ○

  Awareness training for mobile device users

Select an option, then click Submit answer.

• ○

  Quota sampling

• ○

  Haphazard sampling

• ○

  Attribute sampling

• ○

  Variable sampling

Select an option, then click Submit answer.

• ○

  Sell-assessment reports of IT capability and maturity

• ○

  IT performance benchmarking reports with competitors

• ○

  Recent third-party IS audit reports

• ○

  Current and previous internal IS audit reports

Select an option, then click Submit answer.

• ○

  Document last-minute enhancements

• ○

  Perform a pre-implementation audit

• ○

  Perform user acceptance testing (UAT)

• ○

  Ensure that code has been reviewed

Select an option, then click Submit answer.

• ○

  Counting the transactions processed per day

• ○

  Performing a sequence check

• ○

  Tracing data back to the point of origin

• ○

  Preparing and running test data

Select an option, then click Submit answer.

• ○

  Inform potentially affected customers of the security breach

• ○

  Notify business management of the security breach.

• ○

  Research the validity of the alerted breach

• ○

  Engage a third party to independently evaluate the alerted breach.

Select an option, then click Submit answer.

• ○

  Make recommendations to IS management as to appropriate quality standards

• ○

  Postpone the audit until IS management implements written standards

• ○

  Document and lest compliance with the informal standards

• ○

  Finalize the audit and report the finding

Select an option, then click Submit answer.

• ○

  discontinue maintenance of the disaster recovery plan (DRP>

• ○

  coordinate disaster recovery administration with the outsourcing vendor

• ○

  delegate evaluation of disaster recovery to a third party

• ○

  delegate evaluation of disaster recovery to internal audit

Select an option, then click Submit answer.

• ○

  Verify that the compromised systems are fully functional

• ○

  Focus on limiting the damage

• ○

  Document the incident

• ○

  Remove and restore the affected systems

Select an option, then click Submit answer.

• ○

  Restricting program functionality according to user security profiles

• ○

  Restricting access to update programs to accounts payable staff only

• ○

  Including the creators user ID as a field in every transaction record created

• ○

  Ensuring that audit trails exist for transactions

Select an option, then click Submit answer.

• ○

  Tunneling

• ○

  Encryption

• ○

  Message validation

• ○

  Firewalls

Select an option, then click Submit answer.

• ○

  Have an independent party review the source calculations

• ○

  Execute copies of EUC programs out of a secure library

• ○

  implement complex password controls

• ○

  Verify EUC results through manual calculations

Select an option, then click Submit answer.

• ○

  An imaging process was used to obtain a copy of the data from each computer.

• ○

  The legal department has not been engaged.

• ○

  The chain of custody has not been documented.

• ○

  Audit was only involved during extraction of the Information

Select an option, then click Submit answer.

• ○

  Backup media are not reviewed before disposal.

• ○

  Degaussing is used instead of physical shredding.

• ○

  Backup media are disposed before the end of the retention period

• ○

  Hardware is not destroyed by a certified vendor.

Select an option, then click Submit answer.

• ○

  Temperature sensors

• ○

  Humidity sensors

• ○

  Water sensors

• ○

  Air pressure sensors