Home / Isaca / CISA

Isaca CISA Practice Test - Questions Answers, Page 90

Question list

List of questions

Question 891

(0)

An organization has implemented a new data classification scheme and asks the IS auditor to evaluate its effectiveness. Which of the following would be of GREATEST concern to the auditor?

Question 892

(0)

In a data center audit, an IS auditor finds that the humidity level is very low. The IS auditor would be MOST concerned because of an expected increase in:

Question 893

(0)

An organization's business continuity plan (BCP) should be:

Question 894

(0)

Which of the following presents the GREATEST risk associated with end-user computing (EUC) applica-tions over financial reporting?

Question 895

(0)

As part of an audit response, an auditee has concerns with the recommendations and is hesitant to implement them. Which of the following is the BEST course of action for the IS auditor?

Question 896

(0)

Following an IT audit, management has decided to accept the risk highlighted in the audit report. Which of the following would provide the MOST assurance to the IS auditor that management is adequat

Question 897

(0)

During an information security review, an IS auditor learns an organizational policy requires all employ-ees to attend information security training during the first week of each new year. What is t

Question 898

(0)

Which of the following procedures for testing a disaster recovery plan (DRP) is MOST effective?

Question 899

(0)

Which of the following would an IS auditor find to be the GREATEST risk associated with the server room in a remote office location?

Question 900

(0)

Which of the following should be of GREATEST concern to an IS auditor when using data analytics?

Question 891

An organization has implemented a new data classification scheme and asks the IS auditor to evaluate its effectiveness. Which of the following would be of

GREATEST concern to the auditor?

End-user managers determine who should access what information.

The organization has created a dozen different classification categories.

The compliance manager decides how the information should be classified.

The organization classifies most of its information as confidential.

Show Answer Comment (0)

Question 892

In a data center audit, an IS auditor finds that the humidity level is very low. The IS auditor would be MOST concerned because of an expected increase in:

risk of fire.

backup tape failures.

static electricity problems.

employee discomfort.

Show Answer Comment (0)

Question 893

An organization's business continuity plan (BCP) should be:

updated before an independent audit review.

tested after an intrusion attempt into the organization's hot site.

tested whenever new applications are implemented.

updated based on changes to personnel and environments.

Show Answer Comment (0)

Question 894

Which of the following presents the GREATEST risk associated with end-user computing (EUC) applica-tions over financial reporting?

Inability to quickly modify and deploy a solution

Lack of portability for users

Loss of time due to manual processes

Calculation errors in spreadsheets

Show Answer Comment (0)

Question 895

As part of an audit response, an auditee has concerns with the recommendations and is hesitant to implement them. Which of the following is the BEST course of action for the IS auditor?

Accept the auditee's response and perform additional testing.

Suggest hiring a third-party consultant to perform a current state assessment.

Conduct further discussions with the auditee to develop a mitigation plan.

Issue a final report without including the opinion of the auditee.

Show Answer Comment (0)

Following an IT audit, management has decided to accept the risk highlighted in the audit report. Which of the following would provide the MOST assurance to the IS auditor that management is adequately balancing the needs of the business with the need to manage risk?

A communication plan exists for informing parties impacted by the risk.

Potential impact and likelihood are adequately documented.

Identified risk is reported into the organization's risk committee.

Established criteria exist for accepting and approving risk.

Show Answer Comment (0)

Question 897

During an information security review, an IS auditor learns an organizational policy requires all employ-ees to attend information security training during the first week of each new year. What is the auditor's BEST recommendation to ensure employees hired after January receive adequate guid-ance regarding security awareness?

Ensure new employees read and sign acknowledgment of the acceptable use policy.

Revise the policy to include security training during onboarding.

Revise the policy to require security training every six months for all employees.

Require management of new employees to provide an overview of security awareness.

Show Answer Comment (0)