CISA Practice Test

CISA Practice Test practice questions, page 35 of 73, with answer review and explanations.

Question 171

Which of the following BEST facilitates detection of zero-day exploits?

  1. Anti-malware software
  2. User behavior analytics
  3. Intrusion detection systems (IDS)
  4. Intrusion prevention systems (IPS)

Question 172

Which of the following is MOST important to review when evaluating the performance of a critical web application?

  1. Business-defined application response times
  2. Feedback from customer satisfaction surveys
  3. Roles and responsibilities for reporting
  4. Strategy for application performance monitoring in the cloud

Question 173

Which of the following would be an IS auditor's GREATEST concern when reviewing the early stages of a software development project?

  1. The lack of acceptance criteria behind user requirements
  2. The lack of completion of all requirements at the end of each sprint
  3. The lack of technical documentation to support the program code
  4. The lack of a detailed unit and system test plan

Question 174

The PRIMARY reason for an IS auditor to use data analytics techniques is to reduce which type of audit risk?

  1. Technology risk
  2. Inherent risk
  3. Detection risk
  4. Control risk

Question 175

Which type of control has been established when an organization implements a security information and event management (SIEM) system?

  1. Preventive
  2. Detective
  3. Directive
  4. Corrective