CISA Practice Test

CISA Practice Test practice questions, page 13 of 73, with answer review and explanations.

Question 61

Which of the following is the BEST performance indicator for the effectiveness of an incident management program?

  1. Incident alert meantime
  2. Number of incidents reported
  3. Average time between incidents
  4. Incident resolution meantime

Question 62

Backups will MOST effectively minimize a disruptive incident's impact on a business if they are:

  1. taken according to recovery point objectives (RPOs).
  2. scheduled according to the service delivery objectives.
  3. performed by automated backup software on a fixed schedule.
  4. stored on write-once read-many media.

Question 63

An IS audit reveals that an organization is not proactively addressing known vulnerabilities. Which of the following should the IS auditor recommend the organization do FIRST?

  1. Ensure the intrusion prevention system (IPS) is effective.
  2. Verify the disaster recovery plan (DRP) has been tested.
  3. Assess the security risks to the business.
  4. Confirm the incident response team understands the issue.

Question 64

An IS auditor has completed the fieldwork phase of a network security review and is preparing the initial draft of the audit report. Which of the following findings should be ranked as the HIGHEST risk?

  1. Network penetration tests are not performed.
  2. The network firewall policy has not been approved by the information security officer.
  3. Network firewall rules have not been documented.
  4. The network device inventory is incomplete.

Question 65

Which of the following is the PRIMARY advantage of parallel processing for a new system implementation?

  1. Assurance that the new system meets functional requirements
  2. Significant cost savings over other system implementation approaches
  3. More time for users to complete training for the new system
  4. Assurance that the new system meets performance requirements