ISACA CISA Exam (page: 70)
ISACA Certified Information Systems Auditor
Updated on: 02-Jan-2026

Viewing Page 70 of 366

The PRIMARY benefit of information asset classification is that it:

  1. enables risk management decisions.
  2. helps to align organizational objectives.
  3. prevents loss of assets.
  4. facilitates budgeting accuracy.

Answer(s): A



The implementation of an IT governance framework requires that the board of directors of an organization:

  1. approve the IT strategy.
  2. be informed of all IT initiatives.
  3. have an IT strategy committee.
  4. address technical IT issues.

Answer(s): A



What is the PRIMARY reason to adopt a risk-based IS audit strategy?

  1. To achieve synergy between audit and other risk management functions
  2. To reduce the time and effort needed to perform a full audit cycle
  3. To prioritize available resources and focus on areas with significant risk
  4. To identify key threats, risks, and controls for the organization

Answer(s): C



An IS auditor finds that application servers had inconsistent security settings leading to potential vulnerabilities. Which of the following is the BEST recommendation by the IS auditor?

  1. Improve the change management process
  2. Perform a configuration review
  3. Establish security metrics
  4. Perform a penetration test

Answer(s): B



When conducting a post-implementation review of a new software application, an IS auditor should be MOST concerned with an increasing number of:

  1. change requests approved to add new services.
  2. updates required for the end-user operations manual.
  3. operational errors impacting service delivery.
  4. help desk calls requesting future enhancements.

Answer(s): C



Viewing Page 70 of 366



Share your comments for ISACA CISA exam with other users:

Mike 8/20/2023 5:12:00 PM

the exam dumps are helping me get a solid foundation on the practical techniques and practices needed to be successful in the auditing world.
UNITED STATES


Sam 8/31/2023 10:32:00 AM

not bad but you question database from isaca
MALAYSIA


Deno 10/25/2023 1:14:00 AM

i failed the cisa exam today. but i have found all the questions that were on the exam to be on this site.
Anonymous