Free Online Isaca CISA Practice Test

Prepare Your Isaca CISA Exam Questions with Free online CISA Practice Test. Get Brilliant Certified Information Systems Auditor Exam Results with Valid CISA Exam Dumps.

Page: 1 / 305

Total 1524 Questions | Updated On: May 06, 2024

Add To Cart

Question 1

The PRIMARY objective of a control self-assessment (CSA) is to:

A : educate functional areas on risks and controls.

B : ensure appropriate access controls are implemented.

C : gain assurance for business functions that cannot be audited.

D : eliminate the audit risk by leveraging management's analysis.

Answer: A

Question 2

Which of the following is the MOST efficient control that helps to ensure complete data transfer through an interface?

A : Use transmission encryption for data transfer between systems.

B : Use protocols that allow full duplex communication between source and destination systems.

C : Compare data hash values between the source and destination systems.

D : Conduct code reviews of data transfer encoders and decoders in source and destination systems.

Answer: C

Question 3

Code changes are compiled and placed in a change folder by the developer. An implementation team migrates changes to production from the change folder. Which of the following BEST indicates separation of duties is in place during the migration process?

A : A second individual performs code review before the change is released to production.

B : The implementation team does not have access to change the source code.

C : The implementation team does not have experience writing code.

D : The developer approves changes prior to moving them to the change folder.

Answer: B

Question 4

Which of the following responsibilities associated with a disaster recovery plan (DRP) can be outsourced to a Disaster Recovery as a Service (DRaaS) provider?

A : Stakeholder communications during a disaster

B : Validation of recovered data

C : System recovery procedures

D : Processes for maintaining currency of data

Answer: C

Question 5

A bank performed minor changes to the interest calculation computer program. Which of the following techniques would provide the STRONGEST evidence to determine whether the interest calculations are correct?

A : Review of the quality assurance (QA) test results

B : Manual verification of a sample of the results

C : Source code review

D : Parallel simulation using audit software

Answer: D

Page: 1 / 305

Total 1524 Questions | Updated On: May 06, 2024

Add To Cart