CISA Certification Exam Questions with AI Explanations

QUESTION: 206

A checksum is classified as which type of control?

Preventive control
Detective control
Administrative control
Corrective control

Answer(s): B

During a follow-up audit, an IS auditor finds that some critical recommendations have not been addressed as management has decided to accept the risk. Which of the following is the IS auditor's BEST course of action?

Adjust the annual risk assessment accordingly.
Require the auditee to address the recommendations in full.
Evaluate senior management's acceptance of the risk.
Update the audit program based on management's acceptance of risk.

Answer(s): C

Reveal Solution Next Question

QUESTION: 208

Management has asked internal audit to prioritize and perform a specialized cybersecurity audit, but the IS audit team has no experience in this area. Which of the following is the BEST course of action?

Delay the audit until the IS auditors are sufficiently trained.
Delay the audit until an experienced IS auditor has been hired.
Perform the audit as requested using third-party support.
Perform the audit with the most experienced IS auditors.

Answer(s): C

Reveal Solution Next Question

QUESTION: 209

When implementing a new IT maturity model, which of the following should occur FIRST?

Determine the model elements to be evaluated.
Benchmark with industry peers.
Define the target IT maturity level.
Develop performance metrics.

Answer(s): A

Reveal Solution Next Question

QUESTION: 210

When reviewing an organization's information security policies, an IS auditor should verify that the policies have been defined PRIMARILY on the basis of:

an information security framework.
past information security incidents.
a risk management process.
industry best practices.

Answer(s): C

Reveal Solution Next Question

ISACA Certified Information Systems Auditor CISA Exam Questions in PDF

Free ISACA CISA Dumps Questions (page: 42)

QUESTION: 206

QUESTION: 207

QUESTION: 208

QUESTION: 209

QUESTION: 210