Question 1

An organization's audit charter PRIMARILY:

Options :

A : describes the auditor-s authority to conduct audits.

B : formally records the annual and quarterly audit plans.

C : documents the audit process and reporting standards.

D : defines the auditors' code of conduct.

Answer: A

Question 2

During an information security audit of a mid-sized organization, an IS auditor notes that the organization's information security policy is not sufficient. What is the auditor's BEST recommendation for the organization?

Options :

A : Obtain an external consultant-s support to rewrite the policy.

B : Identify and close gaps compared to a best-practice framework.

C : Perform a benchmark with competitors’ policies.

D : Define roles and responsibilities for regularly updating the policy.

Answer: B

Question 3

Email required for business purposes is being stored on employees’ personal devices. Which of the following is an IS auditor's BEST recommendation?

Options :

A : Prohibit employees from storing company email on personal devices.

B : Implement an email containerization solution on personal devices

C : Require employees to utilize passwords on personal devices.

D : Ensure antivirus protection is installed on personal devices

Answer: B

Question 4

When reviewing an IT strategic plan, the GREATEST concern would be that:

Options :

A : the plan was not formally approved by the board of directors.

B : there are no key performance indicators (KPIs).

C : an IT strategy committee has not been created.

D : the plan does not support relevant organizational goals.

Answer: D

Question 5

Which of the following should be the GREATEST concern to an IS auditor reviewing an organization’s job scheduling practices?

Options :

A : Job dependencies are undefined

B : Job processing procedures are missing

C : Most jobs are run manually

D : Jobs are executed during working hours

Answer: C

Free CISA Mock Exam – Practice Online Confidently

Buying Options: