CISA Practice Test

CISA Practice Test practice questions, page 71 of 73, with answer review and explanations.

Question 351

When an IS auditor evaluates key performance indicators (KPIs) for IT initiatives, it is MOST important that the KPIs indicate:

  1. IT deliverables are process driven.
  2. IT objectives are measured.
  3. IT resources are fully utilized.
  4. IT solutions are within budget.

Question 352

In which phase of penetration testing would host detection and domain name system (DNS) interrogation be performed?

  1. Reporting
  2. Attacks
  3. Discovery
  4. Planning

Question 353

Which type of control is being implemented when a biometric access device is installed at the entrance to a facility?

  1. Preventive
  2. Deterrent
  3. Corrective
  4. Detective

Question 354

Which of the following would an IS auditor consider the GREATEST risk associated with a mobile workforce environment?

  1. Loss or damage to the organization's assets
  2. Lack of compliance with organizational policies
  3. Decrease in employee productivity and accountability
  4. Inability to access data remotely

Question 355

Which of the following key performance indicators (KPIs) provides stakeholders with the MOST useful information about whether information security risk is being managed?

  1. The number of security controls implemented
  2. Time from identifying security threats to implementing solutions
  3. Time from security log capture to log analysis
  4. The number of entries in the security risk register