CISA Practice Test

CISA Practice Test practice questions, page 59 of 73, with answer review and explanations.

Question 291

The PRIMARY role of a control self-assessment (CSA) facilitator is to:

  1. provide solutions for control weaknesses.
  2. focus the team on internal controls.
  3. report on the internal control weaknesses.
  4. conduct interviews to gain background information.

Question 292

IT disaster recovery time objectives (RTOs) should be based on the:

  1. maximum tolerable downtime (MTD).
  2. nature of the outage.
  3. maximum tolerable loss of data.
  4. business-defined criticality of the systems.

Question 293

A data analytics team has developed a process automation bot for internal audit that scans user access to all servers in the environment and then randomly selects a sample of new users for testing. Which of the following presents the GREATEST concern with this approach?

  1. The bot can only select samples from the current period.
  2. Auditor judgment is removed from the process.
  3. Evidence of population completeness is not maintained.
  4. Data must be validated manually before being loaded into the bot.

Question 294

What is the MOST critical finding when reviewing an organization's information security management?

  1. No official charter for the information security management system
  2. No employee awareness training and education program
  3. No dedicated security officer
  4. No periodic assessments to identify threats and vulnerabilities

Question 295

The operations team of an organization has reported an IS security attack. Which of the following should be the FIRST step for the security incident response team?

  1. Report results to management.
  2. Document lessons learned.
  3. Perform a damage assessment.
  4. Prioritize resources for corrective action.