Free Isaca CISA Exam Questions

Become Isaca Certified with updated CISA exam questions and correct answers

Page: 1 / 305

Total 1524 Questions | Updated On: Aug 21, 2019

Add To Cart

Question 1

Which of the following risk scenarios is BEST addressed by implementing policies and procedures related to full disk encryption?

A : ta leakage as a result of employees leaving to work for competitors

B : ysical theft of media on which information is stored

C : authorized logical access to information through an application interface

D : ncompliance fines related to storage of regulated information

Answer: B

Question 2

An organization has recently become aware of a pervasive chip-level security vulnerability that affects all of its processors. Which of the following is the BEST way to prevent this vulnerability from being exploited?

A : tall vendor patches.

B : view security log incidents.

C : view hardware vendor contracts.

Answer: A

Question 3

Which of the following activities would allow an IS auditor to maintain independence while facilitating a control self-assessment (CSA)?

A : plementing the remediation plan

B : veloping the remediation plan

C : veloping the CSA questionnaire

D : rtially completing the CSA

Answer: C

Question 4

Which of the following BEST describes the role of a document owner when implementing a data classification policy in an organization?

A : Classifies documents to correctly reflect the level of sensitivity of information they contain

B : Ensures documents are handled in accordance with the sensitivity of information they contain

C : Defines the conditions under which documents containing sensitive information may be transmitted

D : Classifies documents in accordance with industry standards and best practices

Answer: A

Question 5

Which of the following is MOST important for an IS auditor to confirm when assessing the security of a new cloud-based IT application that is linked with the organization’s existing technology?

A : application programming interfaces (APIs) are adequately secured.

B : on-premise database has adequate encryption at rest.

C : cloud provider shares an external audit report

D : organization has a flat network structure.

Answer: A

Page: 1 / 305

Total 1524 Questions | Updated On: Aug 21, 2019

Add To Cart