Isaca CISA Practice Test - Questions Answers, Page 101
List of questions
Question 1001
Which of the following physical controls provides the GREATEST assurance that only authorized individuals can access a data center?
Question 1002
Which of the following should an IS auditor use when verifying a three-way match has occurred in an enterprise resource planning (ERR) system?
Question 1003
Which of the following is the MOST reliable way for an IS auditor to evaluate the operational effectiveness of an organization's data loss prevention (DLP) controls?
Question 1004
Which of the following is the PRIMARY reason an IS auditor should discuss observations with management before delivering a final report?
Question 1005
An organization plans to replace its nightly batch processing backup to magnetic tape with real-time replication to a second data center. Which of the following is the GREATEST risk associated with this change?
Question 1006
When developing customer-facing IT applications, in which stage of the system development life cycle (SDLC) is it MOST beneficial to consider data privacy principles?
Question 1007
An IS auditor is verifying the adequacy of an organization's internal controls and is concerned about potential circumvention of regulations. Which of the following is the BEST sampling method to use?
Question 1008
An IS auditor reviewing incident response management processes notices that resolution times for reoccurring incidents have not shown improvement. Which of the following is the auditor's BEST recommendation?
Question 1009
An organization's security team created a simulated production environment with multiple vulnerable applications. What would be the PRIMARY purpose of creating such an environment?
Question 1010
The use of which of the following would BEST enhance a process improvement program?
Question