Use Updated CISA Dumps (V20.02) to Prepare for Your Certified Information Systems Auditor (CISA) Exam on Your Terms: Check CISA Free Dumps (Part 1, Q1-Q40) Online

1. An IT balanced scorecard is the MOST effective means of monitoring:

2. When reviewing an organization's information security policies, an IS auditor should verify that the policies have been defined PRIMARILY on the basis of:

3. Which of the following would be an IS auditor's GREATEST concern when reviewing the early stages of a software development project?

4. Which of the following is the BEST data integrity check?

5. Spreadsheets are used to calculate project cost estimates. Totals for each cost category are then keyed into the job-costing system.

What is the BEST control to ensure that data is accurately entered into the system?

6. An incorrect version of the source code was amended by a development team. This MOST likely indicates a weakness in:

7. An organizations audit charier PRIMARILY:

8. The decision to accept an IT control risk related to data quality should be the responsibility of the:

9. Which of the following data would be used when performing a business impact analysis (BIA)?

10. Which of the following is the MOST important consideration for an IS auditor when assessing the adequacy of an organization's information security policy?

11. During the evaluation of controls over a major application development project, the MOST effective use of an IS auditor's time would be to review and evaluate:

12. An IS auditor finds that firewalls are outdated and not supported by vendors.

Which of the following should be the auditor's NEXT course of action?

13. Which of the following is the BEST way to determine whether a test of a disaster recovery plan (DRP) was successful?

14. An IS auditor found that a company executive is encouraging employee use of social networking sites for business purposes.

Which of the following recommendations would BEST help to reduce the risk of data leakage?

15. An IS auditor notes that several employees are spending an excessive amount of time using social media sites for personal reasons.

Which of the following should the auditor recommend be performed FIRST?

16. Which of the following fire suppression systems needs to be combined with an automatic switch to shut down the electricity supply in the event of activation?

17. Which of the following would MOST likely impair the independence of the IS auditor when performing a post-implementation review of an application system?

18. An organization plans to receive an automated data feed into its enterprise data warehouse from a third-party service provider.

Which of the following would be the BEST way to prevent accepting bad data?

19. An IS auditor suspects an organization's computer may have been used to commit a crime.

Which of the following is the auditor's BEST course of action?

20. Which of the following access rights presents the GREATEST risk when granted to a new member of the system development staff?

21. An IS auditor is conducting a post-implementation review of an enterprise resource planning (ERP) system. End users indicated concerns with the accuracy of critical automatic calculations made by the system.

The auditor's FIRST course of action should be to:

22. Which of the following provides the MOST reliable audit evidence on the validity of transactions in a financial application?

23. During an incident management audit, an IS auditor finds that several similar incidents were logged during the audit period.

Which of the following is the auditor's MOST important course of action?

24. During an external review, an IS auditor observes an inconsistent approach in classifying system criticality within the organization.

Which of the following should be recommended as the PRIMARY factor to determine system criticality?

25. An IS auditor discovers an option in a database that allows the administrator to directly modify any table. This option is necessary to overcome bugs in the software, but is rarely used. Changes to tables are automatically logged.

The IS auditor's FIRST action should be to:

26. An IS auditor finds that a key Internet-facing system is vulnerable to attack and that patches are not available.

What should the auditor recommend be done FIRST?

27. IS management has recently disabled certain referential integrity controls in the database management system (DBMS) software to provide users increased query performance.

Which of the following controls will MOST effectively compensate for the lack of referential integrity?

28. A system administrator recently informed the IS auditor about the occurrence of several unsuccessful intrusion attempts from outside the organization.

Which of the following is MOST effective in detecting such an intrusion?

29. The PRIMARY advantage of object-oriented technology is enhanced:

30. From an IS auditor's perspective, which of the following would be the GREATEST risk associated with an incomplete inventory of deployed software in an organization?

31. Which of the following BEST minimizes performance degradation of servers used to authenticate users of an e-commerce website?

32. During an audit of a reciprocal disaster recovery agreement between two companies, the IS auditor would be MOST concerned with the:

33. Which of the following attack techniques will succeed because of an inherent security weakness in an Internet firewall?

34. Which of the following is an executive management concern that could be addressed by the implementation of a security metrics dashboard?

35. One benefit of return on investment (ROI) analysts in IT decision making is that it provides the:

36. Which of the following is an audit reviewer's PRIMARY role with regard to evidence?

37. Which of the following is the MOST important benefit of involving IS audit when implementing governance of enterprise IT?

38. Which of the following is MOST important for an effective control self-assessment (CSA) program?

39. What should be the PRIMARY basis for selecting which IS audits to perform in the coming year?

40. Which of the following is the MOST important prerequisite for the protection of physical information assets in a data center?