ISACA CISA Exam (page: 49)
ISACA Certified Information Systems Auditor
Updated on: 25-Dec-2025

Viewing Page 49 of 366

Which type of attack poses the GREATEST risk to an organization's most sensitive data?

  1. Spear phishing attack
  2. Insider attack
  3. Password attack
  4. Eavesdropping attack

Answer(s): B



Using swipe cards to limit employee access to restricted areas requires implementing which additional control?

  1. Physical sign-in of all employees for access to restricted areas
  2. Initial escort of all new hires by a current employee
  3. Periodic review of access profiles by management
  4. Employee-access criteria determined on the basis of IS experience

Answer(s): C



To enable the alignment of IT staff development plans with IT strategy, which of the following should be done FIRST?

  1. Include strategic objectives in IT staff performance objectives.
  2. Review IT staff job descriptions for alignment.
  3. Identify required IT skill sets that support key business processes.
  4. Develop quarterly training for each IT staff member.

Answer(s): C



An internal audit department reports directly to the chief financial officer (CFO) of an organization. This MOST likely leads to:

  1. audit findings becoming more business-oriented.
  2. concern over the independence of the auditor.
  3. audit recommendations receiving greater attention.
  4. biased audit findings and recommendations

Answer(s): B



An internal audit department recently established a quality assurance (QA) program. Which of the following activities is MOST important to include as part of the
QA program requirements?

  1. Long-term internal audit resource planning
  2. Feedback from internal audit staff
  3. Analysis of user satisfaction reports from business lines
  4. Ongoing monitoring of the audit activities

Answer(s): D



Viewing Page 49 of 366



Share your comments for ISACA CISA exam with other users:

Mike 8/20/2023 5:12:00 PM

the exam dumps are helping me get a solid foundation on the practical techniques and practices needed to be successful in the auditing world.
UNITED STATES


Sam 8/31/2023 10:32:00 AM

not bad but you question database from isaca
MALAYSIA


Deno 10/25/2023 1:14:00 AM

i failed the cisa exam today. but i have found all the questions that were on the exam to be on this site.
Anonymous