CISA Practice Test

CISA Practice Test practice questions, page 61 of 73, with answer review and explanations.

Question 301

An organization has begun using social media to communicate with current and potential clients. Which of the following should be of PRIMARY concern to the auditor?

  1. Using a third-party provider to host and manage content
  2. Lack of guidance on appropriate social media usage and monitoring
  3. Negative posts by customers affecting the organization's image
  4. Reduced productivity of stuff using social media

Question 302

An organization is developing data classification standards and has asked internal audit for advice on aligning the standards with best practices. Internal audit would MOST likely recommend the standards should be:

  1. based on the business requirements for confidentiality of the information.
  2. aligned with the organization's segregation of duties requirements.
  3. based on the results of an organization-wide risk assessment.
  4. based on the business requirements for authentication of the information.

Question 303

An organization considers implementing a system that uses a technology that is not in line with the organization's IT strategy. Which of the following is the BEST justification for deviating from the IT strategy?

  1. The system makes use of state-of-the-art technology.
  2. The system has a reduced cost of ownership.
  3. The organization has staff familiar with the technology.
  4. The business benefits are achieved even with extra costs.

Question 304

An organization is running servers with critical business applications that are in an area subject to frequent but brief power outages. Knowledge of which of the following would allow the organization's management to monitor the ongoing adequacy of the uninterruptible power supply (UPS)?

  1. Duration and interval of the power outages
  2. Business impact of server downtime
  3. Number of servers supported by the UPS
  4. Mean time to recover servers after failure

Question 305

An organization implemented a cybersecurity policy last year. Which of the following is the GREATEST indicator that the policy may need to be revised?

  1. A significant increase in authorized connections to third parties
  2. A significant increase in cybersecurity audit findings
  3. A significant increase in external attack attempts
  4. A significant increase in approved exceptions