CISA Free Dumps (Part 3, Q81-Q120) Are Available Online to Help You Continue to Check the CISA Dumps (V20.02): Prepare Well with the Most Updated Materials

1. Cross-site scripting (XSS) attacks are BEST prevented through:

2. When determining whether a project in the design phase will meet organizational objectives, what is BEST to compare against the business case?

3. An organization has outsourced its data processing function to a service provider.

Which of the following would BEST determine whether the service provider continues to meet the organization s objectives?

4. When implementing Internet Protocol security (IPsec) architecture, the servers involved in application delivery:

5. Coding standards provide which of the following?

6. Prior to a follow-up engagement, an IS auditor learns that management has decided to accept a level of residual risk related to an audit finding without remediation. The IS auditor is concerned about management's decision.

Which of the following should be the IS auditor's NEXT course of action?

7. The PRIMARY benefit lo using a dry-pipe fire-suppression system rather than a wet-pipe system is that a dry-pipe system:

8. Which of the following is MOST important with regard to an application development acceptance test?

9. An organization's enterprise architecture (EA) department decides to change a legacy system's components while maintaining its original functionality.

Which of the following is MOST important for an IS auditor to understand when reviewing this decision?

10. An IS auditor is evaluating an organization's IT strategy and plans.

Which of the following would be of GREATEST concern?

11. When an IS audit reveals that a firewall was unable to recognize a number of attack attempts, the auditor's BEST recommendation is to place an intrusion detection system (IDS) between the firewall and:

12. An IS auditor is reviewing an organization's information asset management process.

Which of the following would be of GREATEST concern to the auditor?

13. An IS audit reveals that an organization is not proactively addressing known vulnerabilities.

Which of the following should the IS auditor recommend the organization do FIRST?

14. Which of the following is the BEST way to address segregation of duties issues in an organization with budget constraints?

15. An organization's security policy mandates that all new employees must receive appropriate security awareness training.

Which of the following metrics would BEST assure compliance with this policy?

16. An IS auditor is following up on prior period items and finds management did not address an audit finding.

Which of the following should be the IS auditor's NEXT course of action?

17. Which of the following tests would provide the BEST assurance that a health care organization is handling patient data appropriately?

18. An organization allows employees to retain confidential data on personal mobile devices.

Which of the following is the BEST recommendation to mitigate the risk of data leakage from lost or stolen devices?

19. Which of the following demonstrates the use of data analytics for a loan origination process?

20. Which of the following BEST indicates the effectiveness of an organization's risk management program?

21. An IS auditor has been asked to assess the security of a recently migrated database system that contains personal and financial data for a bank's customers.

Which of the following controls is MOST important for the auditor to confirm is in place?

22. Which of the following is the BEST justification for deferring remediation testing until the next audit?

23. What is BEST for an IS auditor to review when assessing the effectiveness of changes recently made to processes and tools related to an organization's business continuity plan (BCP)?

24. During a follow-up audit, an IS auditor learns that some key management personnel have been replaced since the original audit, and current management has decided not to implement some previously accepted recommendations.

What is the auditor's BEST course of action?

25. Which of the following is the BEST compensating control when segregation of duties is lacking in a small IS department?

26. Which of the following would BEST determine whether a post-implementation review (PIR) performed by the project management office (PMO) was effective?

27. Which of the following is MOST important for an IS auditor to examine when reviewing an organization's privacy policy?

28. Which of the following is the GREATEST concern associated with a high number of IT policy exceptions approved by management?

29. During a new system implementation, an IS auditor has been assigned to review risk management at each milestone. The auditor finds that several risks to project benefits have not been addressed.

Who should be accountable for managing these risks?

30. Which of the following will be the MOST effective method to verify that a service vendor keeps control levels as required by the client?

31. While executing follow-up activities, an IS auditor is concerned that management has implemented corrective actions that are different from those originally discussed and agreed with the audit function.

In order to resolve the situation, the IS auditor's BEST course of action would be to:

32. During an ongoing audit, management requests a briefing on the findings to date.

Which of the following is the IS auditor's BEST course of action?

33. Which of the following is the PRIMARY concern when negotiating a contract for a hot site?

34. Which of the following is MOST important for an IS auditor to review when evaluating the accuracy of a spreadsheet that contains several macros?

35. Which of the following is the BEST recommendation to prevent fraudulent electronic funds transfers by accounts payable employees?

36. A new regulation requires organizations to report significant security incidents to the regulator within 24 hours of identification.

Which of the following is the IS auditor's BEST recommendation to facilitate compliance with the regulation?

37. An IS auditor has found that an organization is unable to add new servers on demand in a cost-efficient manner.

Which of the following is the auditor's BEST recommendation?

38. An IS auditor who was instrumental in designing an application is called upon to review the application.

The auditor should:

39. Which of the following is the BEST method to prevent wire transfer fraud by bank employees?

40. In a small IT web development company where developers must have write access to production, the BEST recommendation of an IS auditor would be to: