CISA Certification Free Questions – Certified Information Systems Auditor

1. Which of the following can best detect unauthorized data modifications by the database administrator?

2. Which of the following is the most important consideration item for information systems auditor when assessing whether a company’s information security policy is appropriate?

3. A company outsources various IT operations to different suppliers.

Which of the following is most important in determining the scope of the audit when planning an audit of the contractual outsourcing business?

4. Which of the following solutions can best solve the problem of aging of IT systems?

5. Which of the following is the most effective way to prevent theft of company information from your laptop?

6. A company is considering replacing a backup tape stored in a different location with a real-time online backup located in the primary data center storage area network (SAN).

Which of the following is the biggest risk?

7. When reviewing system access rights, the information system auditor noticed that an employee’s role within the organization has recently changed, but still has prior access. What should be the next step for the auditor?

8. Information systems auditors are assessing the risk of zero-day attacks and mitigation controls for companies.

The best advice for auditors is to implement:

9. The company makes strategic decisions, and in order to improve profitability, the company will be divided into several separate operational entities. And each entity maintains a shared IT infrastructure.

Which of the following is most helpful in ensuring that the work of the information systems auditor still includes key risk areas within the IT environment as part of its annual plan?

10. Which of the following situations will affect the separation of duties?