CISA Exam Questions and Answers | Exam-Dumps (Page: 48)

QUESTION: 236

The performance, risks, and capabilities of an IT infrastructure are BEST measured using a:

risk management review.
control self-assessment (CSA).
service level agreement (SLA).
balanced scorecard.

Answer(s): D

QUESTION: 237

To develop meaningful recommendations for findings, which of the following is MOST important for an IS auditor to determine and understand?

Criteria
Responsible party
Impact
Root cause

Answer(s): D

Reveal Solution Next Question

QUESTION: 238

An organization allows employees to use personally owned mobile devices to access customers' personal information. Which of the following is MOST important for an IS auditor to verify?

Employees have signed off on an acceptable use policy.
Devices have adequate storage and backup capabilities.
Mobile devices are compatible with company infrastructure.
Mobile device security policies have been implemented.

Answer(s): D

Reveal Solution Next Question

QUESTION: 239

When is the BEST time to commence continuity planning for a new application system?

Immediately after implementation
Following successful user testing
During the design phase
Just prior to the handover to the system maintenance group

Answer(s): C

Reveal Solution Next Question

QUESTION: 240

Prior to the migration of acquired software into production, it is MOST important that the IS auditor review the:

user acceptance test (UAT) report.
vendor testing report.
system documentation.
source code escrow agreement.

Answer(s): A

Reveal Solution Next Question

ISACA CISA Exam (page: 48) ISACA Certified Information Systems Auditor Updated on: 25-Dec-2025

QUESTION: 236

QUESTION: 237

QUESTION: 238

QUESTION: 239

QUESTION: 240

ISACA CISA Exam (page: 48)
ISACA Certified Information Systems Auditor
Updated on: 25-Dec-2025