CISA Practice Test

Review 1823 CISA practice questions with answer explanations and community insights.

Question 1

Which of the following should be of GREATEST concern to an IS auditor reviewing an organization's business continuity plan (BCP)?

  1. The BCP has not been tested since it was first issued.
  2. The BCP is not version-controlled.
  3. The BCP's contact information needs to be updated.
  4. The BCP has not been approved by senior management.

Question 2

Which of the following would be MOST useful when analyzing computer performance?

  1. Tuning of system software to optimize resource usage
  2. Operations report of user dissatisfaction with response time
  3. Statistical metrics measuring capacity utilization
  4. Report of off-peak utilization and response time

Question 3

Which of the following is the GREATEST risk if two users have concurrent access to the same database record?

  1. Entity integrity
  2. Availability integrity
  3. Referential integrity
  4. Data integrity

Question 4

Which of the following is the MOST effective way for an organization to help ensure agreed-upon action plans from an IS audit will be implemented?

  1. Ensure ownership is assigned.
  2. Test corrective actions upon completion.
  3. Ensure sufficient audit resources are allocated.
  4. Communicate audit results organization-wide.

Question 5

Which of the following issues associated with a data center's closed circuit television (CCTV) surveillance cameras should be of MOST concern to an IS auditor?

  1. CCTV recordings are not regularly reviewed.
  2. CCTV records are deleted after one year.
  3. CCTV footage is not recorded 24 x 7.
  4. CCTV cameras are not installed in break rooms.