Online Access Free CISA Practice Test

Which of the following is the BEST source of information to determine the required level of data protection on a file server?

• A.Previous data breach incident reports
• B.Access rights of similar file servers
• C.Acceptable use policy and privacy statements
• D.Data classification policy and procedures

An IS auditor performs a follow-up audit and learns the approach taken by the auditee to fix the findings differs from the agreed-upon approach confirmed during the last audit. Which of the following should be the auditor ' s NEXT course of action?

• A.Evaluate the appropriateness of the remedial action taken.
• B.Inform senior management of the change in approach.
• C.Report results of the follow-up to the audit committee.
• D.Conduct a risk analysis incorporating the change.

Which of the following is MOST important to the effectiveness of smoke detectors installed in a data processing facility?

• A.Detectors trigger audible alarms when activated.
• B.Detectors have the correct industry certification.
• C.Detectors are linked to wet pipe fire suppression systems.
• D.Detectors are linked to dry pipe fire suppression systems.

Which of the following should be of GREATEST concern to an IS auditor when using data analytics?

• A.The data set contains irrelevant fields.
• B.The data source lacks integrity.
• C.The data was not extracted by the auditor.
• D.The data analytics software is open source.

Which of the following is MOST likely to be reduced when implementing optimal risk management strategies?

• A.Sampling risk
• B.Inherent risk
• C.Detection risk
• D.Residual risk