ISACA Certified Information Systems Auditor - CISA FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which of the following is MOST important when creating a forensic image of a hard drive?

A. Generating a content hash of the hard drive B. Securing a backup copy of the hard drive C. Requiring an independent third party be present while imaging D. Choosing an industry-leading forensics software tool

Discussion 0

Correct Answer: C Vote an answer

Question 2

Which of the following will provide the GREATEST assurance to IT management that a quality management system (QMS) is effective?

A. A high percentage of stakeholders satisfied with the quality of IT B. A high percentage of IT processes reviewed by quality assurance (QA) C. A high percentage of incidents being quickly resolved D. A high percentage of IT employees attending quality training

Discussion 0

Correct Answer: A Vote an answer

Question 3

Which of the following is an organization ' s BEST defense against malware?

A. Intrusion detection system (IDS) B. Intrusion prevention system (IPS) C. Security awareness training D. Documented security procedures

Discussion 0

Correct Answer: A Vote an answer

Question 4

Which of the following is the PRIMARY reason an IS auditor should recommend that management create an IT risk register?

A. To ensure there is appropriate funding for IT risk mitigation efforts B. To ensure an inventory of potential IT risks is maintained and reported C. To document root causes of IT-related risk events and lessons learned D. To facilitate internal audit ' s testing of IT-risk-related controls

Discussion 0

Correct Answer: B Vote an answer

Question 5

Which of the following should an IS auditor consider the MOST significant risk associated with a new health records system that replaces a legacy system?

A. Staff were not involved in the procurement process, creating user resistance to the new system. B. The deployment project experienced significant overruns, exceeding budget projections. C. Data is not converted correctly, resulting in inaccurate patient records. D. The new system has capacity issues, leading to slow response times for users.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

Which of the following would be MOST helpful to an IS auditor performing a risk assessment of an application programming interface (API) that feeds credit scores from a well-known commercial credit agency into an organizational system?

A. The most recent audit report from the credit agency B. A data dictionary of the transferred data C. The approved business case for the API D. A technical design document for the interface configuration

Discussion 0

Correct Answer: D Vote an answer

Question 7

Which of the following BEST mitigates the risk of SQL injection attacks against applications exposed to the internet?

A. Web application firewall (WAF) B. SQL server hardening C. Patch management program D. SQL server physical controls

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

An organization has recently acquired and implemented intelligent-agent software for granting loans to customers. During the post-implementation review, which of the following is the MOST important procedure for the IS auditor to perform?

A. Review input and output control reports to verify the accuracy of the system decisions. B. Review system documentation to ensure completeness. C. Review signed approvals to ensure responsibilities for decisions of the system are well defined. D. Review system and error logs to verify transaction accuracy.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

Which of the following is a PRIMARY benefit of using risk assessments to determine areas to be included in an audit plan?

A. Effective allocation of audit resources B. Timely audit execution C. Reduced travel and expense costs D. Effective risk mitigation

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

An IS auditor is tasked to review an organization ' s plan-do-check-act (PDCA) method for improving IT- related processes and wants to determine the accuracy of defined targets to be achieved. Which of the following steps in the PDCA process should the auditor PRIMARILY focus on in this situation?

A. Act B. Plan C. Do D. Check

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 11

Which of the following BEST demonstrates to senior management and the board that an audit function is compliant with standards and the code of ethics?

A. Corrective action plans B. Control self-assessments (CSAs) C. Quality control reviews D. Audit staff interviews

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).