CISA Practice Test

CISA Practice Test practice questions, page 65 of 73, with answer review and explanations.

Question 321

An organization wants to change its project methodology to address increasing costs and process changes. Which of the following is the BEST methodology to use?

  1. Agile application development
  2. Waterfall application development
  3. Joint application development
  4. Object-oriented application development

Question 322

A USB device containing sensitive production data was lost by an employee, and its contents were subsequently found published online. Which of the following controls is the BEST recommendation to prevent a similar recurrence?

  1. Monitoring data being down loaded on USB devices
  2. Using a strong encryption algorithm
  3. Training users on USB device security
  4. Electronically tracking portable devices

Question 323

During an IT operations audit, multiple unencrypted backup tapes containing sensitive credit card information cannot be found. Which of the following presents the GREATEST risk to the organization?

  1. Human resource cost of responding to the incident
  2. Business disruption if a data restore cannot be completed
  3. Reputational damage due to potential identity theft
  4. The cost of recreating the missing backup tapes

Question 324

An organization uses multiple offsite data center facilities. Which of the following is MOST important to consider when choosing related backup devices and media?

  1. Associated costs
  2. Standardization
  3. Backup media capacity
  4. Restoration speed

Question 325

Which of the following is MOST important to determine when conducting a post-implementation review?

  1. Whether the solution architecture complies with IT standards
  2. Whether success criteria have been achieved
  3. Whether lessons learned have been documented
  4. Whether the project has been delivered within the approved budget