CISA Practice Test

CISA Practice Test practice questions, page 10 of 73, with answer review and explanations.

Question 46

The IS quality assurance (QA) group is responsible for:

  1. monitoring the execution of computer processing tasks.
  2. designing procedures to protect data against accidental disclosure.
  3. ensuring that program changes adhere to established standards.
  4. ensuring that the output received from system processing is complete.

Question 47

Which of the following approaches will ensure recovery time objectives (RTOs) are met for an organization's disaster recovery plan (DRP)?

  1. Performing a full interruption test
  2. Performing a parallel test
  3. Performing a tabletop test
  4. Performing a cyber-resilience test

Question 48

Which audit approach is MOST helpful in optimizing the use of IS audit resources?

  1. Agile auditing
  2. Continuous auditing
  3. Risk-based auditing
  4. Outsourced auditing

Question 49

Which of the following would provide the MOST important input during the planning phase for an audit on the implementation of a bring your own device (BYOD) program?

  1. Results of a risk assessment
  2. Policies including BYOD acceptable use statements
  3. Findings from prior audits
  4. An inventory of personal devices to be connected to the corporate network

Question 50

An IS auditor concludes that logging and monitoring mechanisms within an organization are ineffective because central servers are not included within the central log repository. Which of the following audit procedures would have MOST likely identified this exception?

  1. Comparing all servers included in the current central log repository with the listing used for the prior-year audit
  2. Inspecting a sample of alerts generated from the central log repository
  3. Comparing a list of all servers from the directory server against a list of all servers present in the central log repository
  4. Inspecting a sample of alert settings configured in the central log repository