CISA Practice Test

CISA Practice Test practice questions, page 5 of 73, with answer review and explanations.

Question 21

Which of the following is the PRIMARY role of the IS auditor in an organization's information classification process?

  1. Securing information assets in accordance with the classification assigned
  2. Validating that assets are protected according to assigned classification
  3. Ensuring classification levels align with regulatory guidelines
  4. Defining classification levels for information assets within the organization

Question 22

When evaluating whether the expected benefits of a project have been achieved, it is MOST important for an IS auditor to review:

  1. the project schedule.
  2. quality assurance (QA) results.
  3. post-implementation issues.
  4. the business case

Question 23

Which of the following is the MOST important reason for IS auditors to perform post-implementation reviews for critical IT projects?

  1. To determine whether vendors should be paid for project deliverables
  2. To provide the audit committee with an assessment of project team performance
  3. To provide guidance on the financial return on investment (ROI) of projects
  4. To determine whether the organization's objectives were met as expected

Question 24

Which of the following BEST indicates that an incident management process is effective?

  1. Decreased number of calls to the help desk
  2. Increased number of incidents reviewed by IT management
  3. Decreased time for incident resolution
  4. Increased number of reported critical incidents

Question 25

Which of the following MOST effectively minimizes downtime during system conversions?

  1. Phased approach
  2. Parallel run
  3. Direct cutover
  4. Pilot study