Isaca CISA Practice Test - Questions Answers, Page 31

List of questions
Question 301

Which of the following is the MOST important determining factor when establishing appropriate timeframes for follow-up activities related to audit findings?
Question 302

When an IS audit reveals that a firewall was unable to recognize a number of attack attempts, the auditor's BEST recommendation is to place an intrusion detection system (IDS) between the firewall and:
Question 303

Which of the following is the MOST important reason to classify a disaster recovery plan (DRP) as confidential?
Question 304

A now regulation requires organizations to report significant security incidents to the regulator within 24 hours of identification. Which of the following is the IS auditor's BEST recommendation to facilitate compliance with the regulation?
Question 305

After the merger of two organizations, which of the following is the MOST important task for an IS auditor to perform?
Question 306

An IS auditor is reviewing an organization's primary router access control list. Which of the following should result in a finding?
Question 307

While auditing a small organization's data classification processes and procedures, an IS auditor noticed that data is often classified at the incorrect level. What is the MOST effective way for the organization to improve this situation?
Question 308

An organization recently implemented a cloud document storage solution and removed the ability for end users to save data to their local workstation hard drives. Which of the following findings should be the IS auditor's GREATEST concern?
Question 309

Which of the following must be in place before an IS auditor initiates audit follow-up activities?
Question 310

Which of the following is the MOST appropriate and effective fire suppression method for an unstaffed computer room?
Question