CISA Practice Test

CISA Practice Test practice questions, page 12 of 73, with answer review and explanations.

Question 56

Which of the following would be of GREATEST concern when reviewing an organization's security information and event management (SIEM) solution?

  1. SIEM reporting is ad hoc.
  2. SIEM reporting is customized.
  3. SIEM configuration is reviewed annually.
  4. The SIEM is decentralized.

Question 57

A manager identifies active privileged accounts belonging to staff who have left the organization. Which of the following is the threat actor in this scenario?

  1. Hacktivists
  2. Deleted log data
  3. Terminated staff
  4. Unauthorized access

Question 58

An IS auditor is evaluating the access controls for a shared customer relationship management (CRM) system. Which of the following would be the GREATEST concern?

  1. Audit logging is not enabled.
  2. Single sign-on is not enabled.
  3. Complex passwords are not required.
  4. Security baseline is not consistently applied.

Question 59

Which of the following findings from an IT governance review should be of GREATEST concern?

  1. IT value analysis has not been completed.
  2. All IT services are provided by third parties.
  3. IT supports two different operating systems.
  4. The IT budget is not monitored.

Question 60

What would be an IS auditor's BEST course of action when an auditee is unable to close all audit recommendations by the time of the follow-up audit?

  1. Ensure the open issues are retained in the audit results.
  2. Recommend compensating controls for open issues.
  3. Evaluate the residual risk due to open issues.
  4. Terminate the follow-up because open issues are not resolved.