CISA Dumps (V20.02) Are Valid for Exam Preparation: Check CISA Free Dumps (Part 2, Q41-Q80) First

1. A proper audit trail of changes to server start-up procedures would include evidence of:

2. Which of the following would be a result of utilizing a top-down maturity model process?

3. Which audit approach is MOST helpful in optimizing the use of IS audit resources?

4. Which of the following is the MOST effective control to mitigate unintentional misuse of authorized access?

5. Which of the following BEST guards against the risk of attack by hackers?

6. A system development project is experiencing delays due to ongoing staff shortages.

Which of the following strategies would provide the GREATEST assurance of system quality at implementation?

7. Which of the following should be done FIRST when planning a penetration test?

8. Due to limited storage capacity, an organization has decided to reduce the actual retention period for media containing completed low-value transactions.

Which of the following is MOST important for the organization to ensure?

9. During the implementation of an upgraded enterprise resource planning (ERP) system, which of the following is the MOST important consideration for a go-live decision?

10. Which of the following is MOST useful for determining whether the goals of IT are aligned with the organization's goals?

11. During a disaster recovery audit, an IS auditor finds that a business impact analysis (BIA) has not

been performed. The auditor should FIRST

12. Which of the following is the MOST effective control for protecting the confidentiality and integrity of data stored unencrypted on virtual machines?

13. An IS auditor is examining a front-end subledger and a main ledger.

Which of the following would be the GREATEST concern if there are flaws in the mapping of accounts between the two systems?

14. What is MOST important to verify during an external assessment of network vulnerability?

15. A data breach has occurred due lo malware.

Which of the following should be the FIRST course of action?

16. Which of the following should an IS auditor be MOST concerned with during a post-implementation review?

17. Which of the following would BEST demonstrate that an effective disaster recovery plan (DRP) is in place?

18. Which of the following is the BEST way to mitigate the impact of ransomware attacks?

19. Malicious program code was found in an application and corrected prior to release into production. After the release, the same issue was reported.

Which of the following is the IS auditor's BEST recommendation?

20. Documentation of workaround processes to keep a business function operational during recovery of

IT systems is a core part of a:

21. Which of the following strategies BEST optimizes data storage without compromising data retention practices?

22. Which of the following should an IS auditor recommend as a PRIMARY area of focus when an organization decides to outsource technical support for its external customers?

23. To confirm integrity for a hashed message, the receiver should use:

24. Which of the following is MOST important to ensure when planning a black box penetration test?

25. Which of the following is the BEST method to safeguard data on an organization's laptop computers?

26. An IS auditor is planning an audit of an organization's accounts payable processes.

Which of the following controls is MOST important to assess in the audit?

27. When evaluating the design of controls related to network monitoring, which of the following is MOST important for an IS auditor to review?

28. An organization has recently acquired and implemented intelligent-agent software for granting loans to customers.

During the post-implementation review, which of the following is the MOST important procedure for the IS auditor to perform?

29. What is the BEST control to address SQL injection vulnerabilities?

30. An online retailer is receiving customer complaints about receiving different items from what they ordered on the organization's website. The root cause has been traced to poor data quality. Despite efforts to clean erroneous data from the system, multiple data quality issues continue to occur.

Which of the following recommendations would be the BEST way to reduce the likelihood of future occurrences?

31. Which of the following components of a risk assessment is MOST helpful to management in determining the level of risk mitigation to apply?

32. Which of the following would BEST facilitate the successful implementation of an IT-related framework?

33. During a review of a production schedule, an IS auditor observes that a staff member is not complying with mandatory operational procedures.

The auditor's NEXT step should be to:

34. Which of the following is the PRIMARY advantage of parallel processing for a new system implementation?

35. An IS auditor finds the log management system is overwhelmed with false positive alerts. The auditor's BEST recommendation would be to:

36. Which of the following should be the MOST important consideration when conducting a review of IT portfolio management?

37. Which of the following should be the PRIMARY basis for prioritizing follow-up audits?

38. Which of the following is the BEST control to prevent the transfer of files to external parties through instant messaging (IM) applications?

39. Which of the following is the BEST control to mitigate the malware risk associated with an instant messaging (IM) system?

40. Which of the following should be an IS auditor's PRIMARY focus when developing a risk-based IS audit program?