Home / Isaca / CISA

Isaca CISA Practice Test - Questions Answers, Page 84

Question list

List of questions

Question 831

(0)

Which of the following is the PRIMARY objective of enterprise architecture (EA)?

Question 832

(0)

Who is PRIMARILY responsible for the design of IT controls to meet control objectives?

Question 833

(0)

Which of the following should be an IS auditor's GREATEST concern when reviewing an organization's security controls for policy compliance?

Question 834

(0)

An IT governance body wants to determine whether IT service delivery is based on consistently effective processes. Which of the following is the BEST approach?

Question 835

(0)

Which type of review is MOST important to conduct when an IS auditor is informed that a recent internal exploitation of a bug has been discovered in a business application?

Question 836

(0)

Which of the following is an analytical review procedure for a payroll system?

Question 837

(0)

Which of the following provides the BEST evidence that system requirements are met when evaluating a project before implementation?

Question 838

(0)

Which of the following should be of GREATEST concern to an IS auditor assessing an organization's patch management program?

Question 839

(0)

Which of the following should be done FIRST when creating a data protection program?

Question 840

(0)

A checksum is classified as which type of control?

Question 831

Which of the following is the PRIMARY objective of enterprise architecture (EA)?

Maintaining detailed system documentation

Managing and planning for IT investments

Executing customized development and delivery of projects

Enforcing the IT policy across the organization

Show Answer Comment (0)

Question 832

Who is PRIMARILY responsible for the design of IT controls to meet control objectives?

Business management

Internal auditor

Risk management

ITC manager

Show Answer Comment (0)

Question 833

Which of the following should be an IS auditor's GREATEST concern when reviewing an organization's security controls for policy compliance?

The security policy has not been reviewed within the past year.

Security policy documents are available on a public domain website.

Security policies are not applicable across all business units.

End users are not required to acknowledge security policy training.

Show Answer Comment (0)

Question 834

An IT governance body wants to determine whether IT service delivery is based on consistently effective processes. Which of the following is the BEST approach?

Evaluate key performance indicators (KPIs).

Conduct a gap analysis.

Develop a maturity model.

Implement a control self-assessment (CSA).

Show Answer Comment (0)

Question 835

Which type of review is MOST important to conduct when an IS auditor is informed that a recent internal exploitation of a bug has been discovered in a business application?

Penetration testing

Application security testing

Forensic audit

Server security audit

Show Answer Comment (0)