CISA Practice Test

CISA Practice Test practice questions, page 17 of 73, with answer review and explanations.

Question 81

Which of the following activities provides an IS auditor with the MOST insight regarding potential single person dependencies that might exist within the organization?

  1. Reviewing vacation patterns
  2. Interviewing senior IT management
  3. Mapping IT processes to roles
  4. Reviewing user activity logs

Question 82

Which of the following metrics is the BEST indicator of the performance of a web application?

  1. Server thread count
  2. Server uptime
  3. HTTP server error rate
  4. Average response time

Question 83

An IS auditor suspects an organization's computer may have been used to commit a crime. Which of the following is the auditor's BEST course of action?

  1. Contact the incident response team to conduct an investigation.
  2. Advise management of the crime after the investigation.
  3. Examine the computer to search for evidence supporting the suspicions.
  4. Notify local law enforcement of the potential crime before further investigation.

Question 84

An IS auditor follows up on a recent security incident and finds the incident response was not adequate. Which of the following findings should be considered MOST critical?

  1. The attack could not be traced back to the originating person.
  2. The attack was not automatically blocked by the intrusion detection system (IDS).
  3. Appropriate response documentation was not maintained.
  4. The security weakness facilitating the attack was not identified.

Question 85

Which of the following is the MOST important prerequisite for the protection of physical information assets in a data center?

  1. Knowledge of the IT staff regarding data protection requirements
  2. Complete and accurate list of information assets that have been deployed
  3. Segregation of duties between staff ordering and staff receiving information assets
  4. Availability and testing of onsite backup generators