Question 1

An IS auditor is providing input to an RFP to acquire a financial application system. Which of the following is MOST important for the auditor to recommend?

Options :

A : The application should meet the organization-s requirements.

B : Vendor employee background checks should be conducted regularly.

C : Audit trails should be included in the design.

D : Potential suppliers should have experience in the relevant area.

Answer: C

Question 2

Which of the following is an IS auditor's BEST recommendation to help an organization increase the efficiency of computing resources?

Options :

A : Hardware upgrades

B : Real-time backups

C : Virtualization

D : Overclocking the central processing unit (CPU)

Answer: C

Question 3

Which of the following is a corrective control?

Options :

A : Verifying duplicate calculations in data processing

B : Separating equipment development, testing, and production

C : Executing emergency response plans

D : Reviewing user access rights for segregation of duties

Answer: C

Question 4

An IS auditor detects that event logging has been disabled on a critical server. Which of the following is the GREATEST concern?

Options :

A : Users have the ability to disable logging.

B : Organizational policies do not prohibit disabling of event logs.

C : The ability to troubleshoot incidents is limited.

D : Unauthorized transactions may go undetected.

Answer: D

Question 5

During an information security review, an IS auditor learns an organizational policy requires all employees to attend information security training during the first week of each new year What is the auditor's BEST recommendation to ensure employees hired after January receive adequate guidance regarding security awareness?

Options :

A : Require management of new employees to provide an overview of security

B : Revise the policy to require security training every six months for all employees

C : Ensure new employees read and sign acknowledgment of the acceptable use policy

D : Revise the policy to include security training during onboarding

Answer: D

Free CISA Mock Exam – Practice Online Confidently

Buying Options: