CISA Practice Test

CISA Practice Test practice questions, page 25 of 73, with answer review and explanations.

Question 121

An organization is planning to re-purpose workstations that were used to handle confidential information. Which of the following would be the IS auditor's BEST recommendation to dispose of this information?

  1. Overwrite the disks with random data.
  2. Reformat the disks.
  3. Erase the disks by degaussing.
  4. Delete the disk partitions.

Question 122

External experts were used on a recent IT audit engagement. While assessing the external experts' work, the internal audit team found some gaps in the evidence that may have impacted their conclusions. What is the internal audit team's BEST course of action?

  1. Engage another expert to conduct the same testing.
  2. Report a scope limitation in their conclusions.
  3. Recommend the external experts conduct additional testing.
  4. Escalate to senior management.

Question 123

The practice of periodic secure code reviews is which type of control?

  1. Compensating
  2. Detective
  3. Preventive
  4. Corrective

Question 124

Which of the following is the PRIMARY role of key performance indicators (KPIs) in supporting business process effectiveness?

  1. To analyze workflows in order to optimize business processes and eliminate tasks that do not provide value
  2. To evaluate the cost-benefit of tools implemented to monitor control performance
  3. To enable conclusions about the performance of the processes and target variances for follow-up analysis
  4. To assess the functionality of a software deliverable based on business processes

Question 125

Which of the following would BEST enable an organization to address the security risks associated with a recently implemented bring your own device (BYOD) strategy?

  1. Mobile device testing program
  2. Mobile device upgrade program
  3. Mobile device awareness program
  4. Mobile device tracking program