ISACA CISA Exam (page: 47)
ISACA Certified Information Systems Auditor
Updated on: 25-Dec-2025

Viewing Page 47 of 366

A business unit cannot achieve desired segregation of duties between operations and programming due to size constraints. Which of the following is MOST important for the IS auditor to identify?

  1. Unauthorized user controls
  2. Compensating controls
  3. Controls over operational effectiveness
  4. Additional control weaknesses

Answer(s): B



The BEST way to determine whether programmers have permission to alter data in the production environment is by reviewing:

  1. the access control system's configuration.
  2. how the latest system changes were implemented.
  3. the access rights that have been granted.
  4. the access control system's log settings.

Answer(s): C



Several unattended laptops containing sensitive customer data were stolen from personnel offices. Which of the following would be an IS auditor's BEST recommendation to protect data in case of recurrence?

  1. Enhance physical security.
  2. Require the use of cable locks.
  3. Require two-factor authentication.
  4. Encrypt the disk drive.

Answer(s): D



When classifying information, it is MOST important to align the classification to:

  1. business risk.
  2. data retention requirements.
  3. industry standards.
  4. security policy.

Answer(s): A



An organization's information security department has recently created a centralized governance model to ensure that network-related findings are remediated within the service level agreement (SLA). What should the IS auditor use to assess the maturity and capability of this governance model?

  1. Key risk indicators (KRIs)
  2. Key process controls
  3. Key data elements
  4. Key performance indicators (KPIs)

Answer(s): D



Viewing Page 47 of 366



Share your comments for ISACA CISA exam with other users:

Mike 8/20/2023 5:12:00 PM

the exam dumps are helping me get a solid foundation on the practical techniques and practices needed to be successful in the auditing world.
UNITED STATES


Sam 8/31/2023 10:32:00 AM

not bad but you question database from isaca
MALAYSIA


Deno 10/25/2023 1:14:00 AM

i failed the cisa exam today. but i have found all the questions that were on the exam to be on this site.
Anonymous