CISA Practice Test

CISA Practice Test practice questions, page 15 of 73, with answer review and explanations.

Question 71

When auditing the security architecture of an online application, an IS auditor should FIRST review the:

  1. location of the firewall within the network.
  2. firewall standards.
  3. firmware version of the firewall.
  4. configuration of the firewall.

Question 72

An organization is planning an acquisition and has engaged an IS auditor to evaluate the IT governance framework of the target company. Which of the following would be MOST helpful in determining the effectiveness of the framework?

  1. Recent third-party IS audit reports
  2. Current and previous internal IS audit reports
  3. IT performance benchmarking reports with competitors
  4. Self-assessment reports of IT capability and maturity

Question 73

Due to limited storage capacity, an organization has decided to reduce the actual retention period for media containing completed low-value transactions. Which of the following is MOST important for the organization to ensure?

  1. The policy includes a strong risk-based approach.
  2. The retention period complies with data owner responsibilities.
  3. The retention period allows for review during the year-end audit.
  4. The total transaction amount has no impact on financial reporting.

Question 74

Which of the following should an IS auditor be MOST concerned with during a post-implementation review?

  1. The system does not have a maintenance plan.
  2. The system contains several minor defects.
  3. The system deployment was delayed by three weeks.
  4. The system was over budget by 15%.

Question 75

Which of the following is the PRIMARY basis on which audit objectives are established?

  1. Audit risk
  2. Consideration of risks
  3. Assessment of prior audits
  4. Business strategy