{"id":3468,"date":"2021-11-17T16:14:29","date_gmt":"2021-11-17T08:14:29","guid":{"rendered":"https:\/\/blog.spotodumps.com\/?p=3468"},"modified":"2021-11-17T16:36:43","modified_gmt":"2021-11-17T08:36:43","slug":"2021-updated-isaca-cisa-practice-test-15-questions","status":"publish","type":"post","link":"https:\/\/blog.spotodumps.com\/index.php\/2021\/11\/17\/2021-updated-isaca-cisa-practice-test-15-questions\/","title":{"rendered":"2021 Updated ISACA CISA Practice Test (15 Questions)"},"content":{"rendered":"

CISA\u00ae (Certified Information Systems Auditor)<\/a> is a globally recognized credential in information security auditing, control, and assurance. The certification is provided by ISACA, which was previously known as the Information Systems Audit and Control Association but is now known solely by its acronym due to the broad range of domains and certifications it presently covers.
\nThere are three main phases to become a CISA Certified professional.<\/p>\n

    \n
  1. Pass the CISA exam<\/li>\n
  2. Have a minimum of 5 years of relevant job experience (there are few exceptions). Visit ISACA for further information.<\/li>\n
  3. Follow ISACA’s code of ethics and professional standards. This blog post will focus on the first of the three parts, which is passing the CISA exam.<\/li>\n<\/ol>\n

    If you’re going to take the CISA exam, practice with these genuine exam questions to see if you’re ready.<\/p>\n

    \"get<\/a><\/p>\n

    Question 1<\/strong>
    \nWhich of the following is an analytical review procedure for a payroll system?
    \nA. Performing penetration attempts on the payroll system
    \nB. Evaluating the performance of the payroll system using benchmarking software
    \nC. Performing reasonableness tests by multiplying the number of employees by the average wage rate
    \nD. Testing hours reported on time sheets<\/p>\n

    Answer :<\/strong> C<\/p>\n

     <\/p>\n

    Question 2<\/strong>
    \nAn IS auditor observes that the CEO has full access to the enterprise resource planning (ERP) system. The IS auditor should FIRST:
    \nA. accept the level of access provided as appropriate
    \nB. recommend that the privilege be removed
    \nC. ignore the observation as not being material to the review
    \nD. document the finding as a potential risk<\/p>\n

    Answer :<\/strong> D<\/p>\n

     <\/p>\n

    Question 3<\/strong>
    \nTwo servers are deployed in a cluster to run a mission-critical application. To determine whether the system has been designed for optimal efficiency, the IS auditor should verify that:
    \nA. the security features in the operating system are all enabled
    \nB. the number of disks in the cluster meets minimum requirements
    \nC. the two servers are of exactly the same configuration
    \nD. load balancing between the servers has been implemented<\/p>\n

    Answer :<\/strong> D<\/p>\n

     <\/p>\n

    Question 4<\/strong>
    \nThe GREATEST risk when performing data normalization is:
    \nA. the increased complexity of the data model
    \nB. duplication of audit logs
    \nC. reduced data redundancy
    \nD. decreased performance<\/p>\n

    Answer :<\/strong> A<\/p>\n

     <\/p>\n

    Question 5<\/strong>
    \nAn IS auditor has found that a vendor has gone out of business and the escrow has an older version of the source code. What is the auditor\u05d2\u20ac\u2122s BEST recommendation for the organization?
    \nA. Continue using the existing application since it meets the current requirements
    \nB. Prepare a maintenance plan that will support the application using the existing code
    \nC. Bring the escrow version up to date
    \nD. Undertake an analysis to determine the business risk<\/p>\n

    Answer :<\/strong> D<\/p>\n

    \"get<\/a><\/p>\n

    Question 6<\/strong>
    \nWhich of the following is the BEST way to evaluate the effectiveness of access controls to an internal network?
    \nA. Perform a system penetration test
    \nB. Test compliance with operating procedures
    \nC. Review access rights
    \nD. Review router configuration tables<\/p>\n

    Answer :<\/strong> A<\/p>\n

     <\/p>\n

    Question 7<\/strong>
    \nAn IS auditor finds a number of system accounts that do not have documented approvals. Which of the following should be performed FIRST by the auditor?
    \nA. Have the accounts removed immediately
    \nB. Obtain sign-off on the accounts from the application owner
    \nC. Document a finding and report an ineffective account provisioning control
    \nD. Determine the purpose and risk of the accounts<\/p>\n

    Answer :<\/strong> D<\/p>\n

     <\/p>\n

    Question 8<\/strong>
    \nAn IS auditor is a member of an application development team that is selecting software. Which of the following would impair the auditor\u05d2\u20ac\u2122s independence?
    \nA. Verifying the weighting of each selection criteria
    \nB. Approving the vendor selection methodology
    \nC. Reviewing the request for proposal (RFP)
    \nD. Witnessing the vendor selection process<\/p>\n

    Answer :<\/strong> B<\/p>\n

     <\/p>\n

    Question 9<\/strong>
    \nAn internal control audit has revealed a control deficiency related to a legacy system where the compensating controls no longer appear to be effective. Which of the following would BEST help the information security manager determine the security requirements to resolve the control deficiency?
    \nA. Cost-benefit analysis
    \nB. Gap analysis
    \nC. Risk assessment
    \nD. Business case<\/p>\n

    Answer :<\/strong> B<\/p>\n

     <\/p>\n

    Question 10<\/strong>
    \nAn audit of the quality management system (QMS) begins with an evaluation of the:
    \nA. organization\u05d2\u20ac\u2122s QMS policy
    \nB. sequence and interaction of QMS processes
    \nC. QMS processes and their application
    \nD. QMS document control procedures<\/p>\n

    Answer :<\/strong> A<\/p>\n

     <\/p>\n

    Question 11<\/strong>
    \nAn IS auditor has completed an audit on the organization\u05d2\u20ac\u2122s IT strategic planning process. Which of the following findings should be given the HIGHEST priority?
    \nA. The IT strategic plan was completed prior to the formulation of the business strategic plan
    \nB. Assumptions in the IT strategic plan have not been communicated to business stakeholders
    \nC. The IT strategic plan was formulated based on the current IT capabilities
    \nD. The IT strategic plan does not include resource requirements for implementation<\/p>\n

    Answer :<\/strong> A<\/p>\n

     <\/p>\n

    Question 12<\/strong>
    \nWhich of the following provides the BEST evidence of successfully completed batch uploads?
    \nA. Sign-off on the batch journal
    \nB. Using sequence controls
    \nC. Enforcing batch cut-off times
    \nD. Reviewing process logs<\/p>\n

    Answer :<\/strong> D<\/p>\n

     <\/p>\n

    Question 13<\/strong>
    \nAn IS auditor is conducting a review of a healthcare organization\u05d2\u20ac\u2122s IT policies for handling medical records. Which of the following is MOST important to verify?
    \nA. A documented policy approval process is in place
    \nB. Policy writing standards are consistent
    \nC. The policies comply with regulatory requirements
    \nD. IT personnel receive ongoing policy training<\/p>\n

    Answer :<\/strong> C<\/p>\n

     <\/p>\n

    Question 14<\/strong>
    \nAudit management has just completed the annual audit plan for the upcoming year, which consists entirely of high-risk processes. However, it is determined that there are insufficient resources to execute the plan. What should be done NEXT?
    \nA. Remove audits from the annual plan to better match the number of resources available
    \nB. Reduce the scope of the audits to better match the number of resources available
    \nC. Present the annual plan to the audit committee and ask for more resources
    \nD. Review the audit plan and defer some audits to the subsequent year<\/p>\n

    Answer :<\/strong> C<\/p>\n

     <\/p>\n

    Question 15<\/strong>
    \nIf concurrent update transactions to an account are not processed properly, which of the following will be affected?
    \nA. Integrity
    \nB. Confidentiality
    \nC. Availability
    \nD. Accountability<\/p>\n

    Answer :<\/strong> A<\/p>\n

     <\/p>\n

    More Exam Dumps that Guarantees 100% Pass Your Real Exam Questions!<\/p>\n

    \"get<\/a><\/p><\/blockquote>\n

    Latest SPOTO Candidates Pass Feedback<\/strong><\/h2>\n