CISA Exam Questions and Answers | Exam-Dumps (Page: 24)

QUESTION: 116

An IS auditor found that a company executive is encouraging employee use of social networking sites for business purposes. Which of the following recommendations would BEST help to reduce the risk of data leakage?

Requiring policy acknowledgment and nondisclosure agreements (NDAs) signed by employees
Monitoring employees' social networking usage
Establishing strong access controls on confidential data
Providing education and guidelines to employees on use of social networking sites

Answer(s): D

Reveal Solution Next Question

QUESTION: 117

Which of the following is the MOST efficient way to assess the controls in a service provider's environment?

Review testing performed by the service provider's internal audit department.
Require the service provider to conduct control self-assessments (CSAs).
Review the service provider's master service agreement (MSA).
Obtain an independent auditor's report from the service provider.

Answer(s): D

Reveal Solution Next Question

QUESTION: 118

The PRIMARY focus of audit follow-up reports should be to:

assess if new risks have developed.
determine if audit recommendations have been implemented.
determine if past findings are still relevant.
verify the completion date of the implementation.

Answer(s): B

Reveal Solution Next Question

QUESTION: 119

Which of the following is the BEST way to mitigate the risk associated with technology obsolescence?

Create tactical and strategic IS plans.
Make provisions in the budgets for potential upgrades.
Invest in current technology.
Create a technology watch team that evaluates emerging trends.

Answer(s): A

Reveal Solution Next Question

QUESTION: 120

Which of the following is MOST important to ensure when reviewing a global organization's controls to protect data held on its IT infrastructure across all of its locations?

The capacity of underlying communications infrastructure in the host locations is sufficient.
The threat of natural disasters in each location hosting infrastructure has been accounted for.
Relevant data protection legislation and regulations for each location are adhered to.
Technical capabilities exist in each location to manage the data and recovery operations.

Answer(s): C

Reveal Solution Next Question

ISACA CISA Exam (page: 24) ISACA Certified Information Systems Auditor Updated on: 25-Dec-2025

QUESTION: 116

QUESTION: 117

QUESTION: 118

QUESTION: 119

QUESTION: 120

ISACA CISA Exam (page: 24)
ISACA Certified Information Systems Auditor
Updated on: 25-Dec-2025