CISA Practice Test

CISA Practice Test practice questions, page 19 of 73, with answer review and explanations.

Question 91

Which of the following is MOST important for an IS auditor to confirm when reviewing an organization's plans to implement robotic process automation (RPA) to automate routine business tasks?

  1. A benchmarking exercise of industry peers who use RPA has been completed.
  2. The end-to-end process is understood and documented.
  3. A request for proposal (RFP) has been issued to qualified vendors.
  4. Roles and responsibilities are defined for the business processes in scope.

Question 92

Which of the following BEST facilitates the legal process in the event of an incident?

  1. Right to perform e-discovery
  2. Preserving the chain of custody
  3. Results of a root cause analysis
  4. Advice from legal counsel

Question 93

Cross-site scripting (XSS) attacks are BEST prevented through:

  1. secure coding practices.
  2. use of common industry frameworks.
  3. a three-tier web architecture.
  4. application firewall policy settings.

Question 94

Prior to a follow-up engagement, an IS auditor learns that management has decided to accept a level of residual risk related to an audit finding without remediation. The IS auditor is concerned about management's decision. Which of the following should be the IS auditor's NEXT course of action?

  1. Present the issue to executive management.
  2. Report the disagreement to the board.
  3. Accept management's decision and continue the follow-up.
  4. Report the issue to IS audit management.

Question 95

An IS auditor observes that a bank's web page address is prefixed "https://". The auditor would be correct to conclude that:

  1. the bank has established a virtual private network (VPN).
  2. transactions are encrypted.
  3. the bank has a restricted Internet protocol (IP) address.
  4. the customer is connected to the bank's intranet.