ISACA CISA Exam (page: 19)
ISACA Certified Information Systems Auditor
Updated on: 25-Dec-2025

Viewing Page 19 of 366

Which of the following is MOST important for an IS auditor to confirm when reviewing an organization's plans to implement robotic process automation (RPA) to automate routine business tasks?

  1. A benchmarking exercise of industry peers who use RPA has been completed.
  2. The end-to-end process is understood and documented.
  3. A request for proposal (RFP) has been issued to qualified vendors.
  4. Roles and responsibilities are defined for the business processes in scope.

Answer(s): B



Which of the following BEST facilitates the legal process in the event of an incident?

  1. Right to perform e-discovery
  2. Preserving the chain of custody
  3. Results of a root cause analysis
  4. Advice from legal counsel

Answer(s): B



Cross-site scripting (XSS) attacks are BEST prevented through:

  1. secure coding practices.
  2. use of common industry frameworks.
  3. a three-tier web architecture.
  4. application firewall policy settings.

Answer(s): A



Prior to a follow-up engagement, an IS auditor learns that management has decided to accept a level of residual risk related to an audit finding without remediation. The IS auditor is concerned about management's decision. Which of the following should be the IS auditor's NEXT course of action?

  1. Present the issue to executive management.
  2. Report the disagreement to the board.
  3. Accept management's decision and continue the follow-up.
  4. Report the issue to IS audit management.

Answer(s): D



An IS auditor observes that a bank's web page address is prefixed "https://". The auditor would be correct to conclude that:

  1. the bank has established a virtual private network (VPN).
  2. transactions are encrypted.
  3. the bank has a restricted Internet protocol (IP) address.
  4. the customer is connected to the bank's intranet.

Answer(s): B



Viewing Page 19 of 366



Share your comments for ISACA CISA exam with other users:

Mike 8/20/2023 5:12:00 PM

the exam dumps are helping me get a solid foundation on the practical techniques and practices needed to be successful in the auditing world.
UNITED STATES


Sam 8/31/2023 10:32:00 AM

not bad but you question database from isaca
MALAYSIA


Deno 10/25/2023 1:14:00 AM

i failed the cisa exam today. but i have found all the questions that were on the exam to be on this site.
Anonymous