Free Isaca CISA Exam Questions

Become Isaca Certified with updated CISA exam questions and correct answers

Page: 1 / 305

Total 1524 Questions | Updated On: Feb 09, 2026

Add To Cart

Question 1

Which of the following is the BEST source of information for an IS auditor to use when determining whether an organization's information security policy is adequate?

A : k assessment results

B : netration test results

C : dustry benchmarks

D : formation security program plans

Answer: A

Question 2

Which of the following is the BEST way to determine whether a test of a disaster recovery plan (DRP) was successful?

A : alyze whether predetermined test objectives were met.

B : rform testing at the backup data center.

C : t offsite backup files.

D : aluate participation by key personnel.

Answer: A

Question 3

In a small IT web development company where developers must have write access to production, the BEST recommendation of an IS auditor would be to:

A : rform a user access review for the development team.

B : re another person to perform migration to production.

C : plement continuous monitoring controls.

D : move production access from the developers.

Answer: C

Question 4

Which of the following should be responsible for verifying changes to an application are authorized?

A : Project oversight board

B : Business line management

C : Release management team

D : Steering committee

Answer: C

Question 5

To mitigate the risk of exposing data through application programming interface (API) queries, which of the following design considerations is MOST important?

A : ta quality

B : ta integrity

C : ta minimization

D : ta retention

Answer: C

Page: 1 / 305

Total 1524 Questions | Updated On: Feb 09, 2026

Add To Cart