In an annual audit cycle, the audit of an organization's IT department resulted in many findings. Which of the following would be the MOST important consideration when planning the next audit?

Following up on the status of all recommendations

Postponing the review until all of the findings have been rectified

Limiting the review to the deficient areas

Verifying that all recommendations have been implemented

Following up on the status of all recommendations

An IS auditor would MOST likely recommend that IT management use a balanced scorecard to:

assess IT functions and processes.

indicate whether the organization meets quality standards.

ensure that IT staff meet performance requirements.

assess IT functions and processes.

A sample for testing must include the 80 largest client balances and a random sample of the rest. What should the IS auditor recommend?

Use generalized audit software.

Develop an integrated test facility (ITF).

Use generalized audit software.

Leverage a random number generator.

Which of the following is the MOST appropriate testing approach when auditing a daily data flow between two systems via an automated interface to confirm that it is complete and accurate?

Perform data reconciliation between the two systems for a sample of 25 days.

Confirm that the encryption standard applied to the interface is in line with best practice.

Inspect interface configurations and an example output of the systems.

Perform data reconciliation between the two systems for a sample of 25 days.

Conduct code review for both systems and inspect design documentation.

In reviewing the IT strategic plan, the IS auditor should consider whether it identifies the:

project management methodologies used.

links to operational tactical plans.

An IS auditor has been asked to review an event log aggregation system to ensure risk management practices have been applied. Which of the following should be of MOST concern to the auditor?

Completeness testing has not been performed on the log data.

Log feeds are uploaded via batch process.

Completeness testing has not been performed on the log data.

The log data is not normalized.

Data encryption standards have not been considered.

An IS auditor found that operations personnel failed to run a script contributing to year-end financial statements. Which of the following is the BEST recommendation?

Bring staff with financial experience into operations.

Which of the following is the GREATEST risk associated with security patches being automatically downloaded and applied to production servers?

Patches may result in major service failures.

Supporting documentation is not updated.

Anti-malware is disabled during patch installation.

Patches may be installed regardless of their criticality.

Patches may result in major service failures.

From a risk management perspective, which of the following is the BEST approach when implementing a large and complex data center IT infrastructure?

A deployment plan based on sequenced phases

Simulating the new infrastructure before deployment

Prototyping and a one-phase deployment

A deployment plan based on sequenced phases

A big bang deployment with a successful proof of concept

Which of the following is the BEST way to mitigate risk to an organization's network associated with devices permitted under a bring your own device (BYOD) policy?

Implement a network access control system.

Require personal devices to be reviewed by IT staff.

Enable port security on all network switches.

Implement a network access control system.

Ensure the policy requires antivirus software on devices.

An IS auditor is reviewing an organization's incident management processes and procedures. Which of the following observations should be the auditor's GREATEST concern?

Ineffective post-incident review

Ineffective incident prioritization

Ineffective incident classification

An IS auditor finds ad hoc vulnerability scanning is in place with no clear alignment to the organization's wider security threat and vulnerability management program.Which of the following would BEST enable the organization to work toward improvement in this area?

Using a capability maturity model to identify a path to an optimized program

Implementing security logging to enhance threat and vulnerability management

Maintaining a catalog of vulnerabilities that may impact mission-critical systems

Using a capability maturity model to identify a path to an optimized program

Outsourcing the threat and vulnerability management function to a third party

Which of the following controls is BEST implemented through system configuration?

Network user accounts for temporary workers expire after 90 days.

Application user access is reviewed every 180 days for appropriateness.

Financial data in key reports is traced to source systems for completeness and accuracy.

Computer operations personnel initiate batch processing jobs daily.

The business case for an information system investment should be available for review until the:

benefits have been fully realized.

information system investment is retired.

information system has reached end of life.

formal investment decision is approved.

benefits have been fully realized.

Which of the following BEST demonstrates alignment of the IT department with the corporate mission?

Quarterly steering committee meetings

Analysis of IT department functionality

Biweekly reporting to senior management

Quarterly steering committee meetings

An IS auditor noted a recent production incident in which a teller transaction system incorrectly charged fees to customers due to a defect from a recent release. Which of the following should be the auditor's NEXT step?

Evaluate the change management process.

Evaluate the incident management process.

Evaluate the change management process.

Evaluate secure code practices.

Which of the following is the PRIMARY reason for using a digital signature?

Authenticate the sender of a message

Provide availability to the transmission

Authenticate the sender of a message

Provide confidentiality to the transmission

Verify the integrity of the data and the identity of the recipient

During an organization's implementation of a data loss prevention (DLP) solution, which of the following activities should be completed FIRST?

Establishing exceptions workflow

A new regulation has been enacted that mandates specific information security practices for the protection of customer data. Which of the following is MOST useful for an IS auditor to review when auditing against the regulation?

Customer data protection roles and responsibilities

Benchmarking studies of adaptation to the new regulation

An external attacker spoofing an internal Internet Protocol (IP) address can BEST be detected by which of the following?

Using a state table to compare the message states of each packet as it enters the system

Comparing the source address to the domain name server (DNS) entry

Using static IP addresses for identification

Comparing the source address to the interface used as the entry point

Using a state table to compare the message states of each packet as it enters the system

Which of the following would be of GREATEST concern to an IS auditor reviewing the feasibility study for a new application system?

System requirements and expectations have not been clarified.

Security requirements have not been defined.

Conditions under which the system will operate are unclear.

The business case does not include well-defined strategic benefits.

System requirements and expectations have not been clarified.

When an intrusion into an organization's network is detected, which of the following should be done FIRST?

Block all compromised network nodes.

Identify nodes that have been compromised.

Data from a system of sensors located outside of a network is received by the open ports on a server. Which of the following is the BEST way to ensure the integrity of the data being collected from the sensor system?

Transmit the sensor data via a virtual private network (VPN) to the server.

Implement network address translation on the sensor system.

Route the traffic from the sensor system through a proxy server.

Hash the data that is transmitted from the sensor system.

Transmit the sensor data via a virtual private network (VPN) to the server.

If a recent release of a program has to be backed out of production, the corresponding changes within the delta version of the code should be:

eliminated from the source code that reflects the version in production.

filed in production for future reference in researching the problem.

applied to the source code that reflects the version in production.

eliminated from the source code that reflects the version in production.

reinstalled when replacing the version back into production.

An IS auditor is reviewing an organization that performs backups on local database servers every two weeks and does not have a formal policy to govern data backup and restoration procedures. Which of the following findings presents the GREATEST risk to the organization?

Insufficient data backup frequency

Absence of a data backup policy

Lack of periodic data restoration testing

Insufficient data backup frequency

An organization's information security policies should be developed PRIMARILY on the basis of:

past information security incidents.

Which of the following should be the GREATEST concern for an IS auditor performing a post-implementation review for a major system upgrade?

Change approvals are not formally documented.

Changes are promoted to production by the development group.

Object code can be accessed by the development group.

Developers have access to the testing environment.

Change approvals are not formally documented.

A steering committee established to oversee an organization's digital transformation program is MOSTlikely to be involved with which of the following activities?

Reviewing escalated project issues

Preparing project status reports

Reviewing escalated project issues

Which of the following practices associated with capacity planning provides the GREATEST assurance that future incidents related to existing server performance will be prevented?

Reviewing results from simulated high-demand stress test scenarios

Performing a root cause analysis for past performance incidents

Anticipating current service level agreements (SLAs) will remain unchanged

Duplicating existing disk drive systems to improve redundancy and data storage

Isaca CISA Practice Test 19 - Free Online Exam Prep & Questions

Which of the following is the MOST important consideration when developing tabletop exercises within a cybersecurity incident response plan?

Become a Premium Member for full access

Unlock Premium Member

Isaca CISA Practice Test 19

Question

Isaca CISA Practice Tests

Practice Tests