CISA Practice Test

CISA Practice Test practice questions, page 4 of 73, with answer review and explanations.

Question 16

The GREATEST benefit of using a prototyping approach in software development is that it helps to:

  1. improve efficiency of quality assurance (QA) testing.
  2. conceptualize and clarify requirements.
  3. decrease the time allocated for user testing and review.
  4. minimize scope changes to the system.

Question 17

After an employee termination, a network account was removed, but the application account remained active. To keep this issue from recurring, which of the following is the BEST recommendation?

  1. Integrate application accounts with network single sign-on.
  2. Perform periodic access reviews.
  3. Retrain system administration staff.
  4. Leverage shared accounts for the application.

Question 18

During an IT governance audit, an IS auditor notes that IT policies and procedures are not regularly reviewed and updated. The GREATEST concern to the IS auditor is that policies and procedures might not:

  1. reflect current practices.
  2. be subject to adequate quality assurance (QA).
  3. include new systems and corresponding process changes.
  4. incorporate changes to relevant laws.

Question 19

Management receives information indicating a high level of risk associated with potential flooding near the organization's data center with in the next few years. As a result, a decision has been made to move data center operations to another facility on higher ground. Which approach has been adopted?

  1. Risk reduction
  2. Risk acceptance
  3. Risk transfer
  4. Risk avoidance

Question 20

An emergency power-off switch should:

  1. not be in the computer room.
  2. not be identified
  3. be protected.
  4. be illuminated.