Online Access Free CISA Practice Test

An IT balanced scorecard is the MOST effective means of monitoring:

• A.governance of enterprise IT.
• B.control effectiveness.
• C.return on investment (ROI).
• D.change management effectiveness.

An IS auditor plans to review all access attempts to a video-monitored and proximity card-controlled communications room. Which of the following would be MOST useful to the auditor?

• A.Security incident log
• B.Alarm system with CCTV
• C.Access control log
• D.Access card allocation records

An organization has outsourced its data processing function to a service provider. Which of the following would BEST determine whether the service provider continues to meet the organization s objectives?

• A.Review of performance against service level agreements (SLAs)
• B.Adequacy of the service provider's insurance
• C.Periodic audits of controls by an independent auditor
• D.Assessment of the personnel training processes of the provider

From an IS auditor's perspective, which of the following would be the GREATEST risk associated with an incomplete inventory of deployed software in an organization?

• A.Inability to identify unused licenses within the organization
• B.Inability to close unused ports on critical servers
• C.Inability to deploy updated security patches
• D.Inability to determine the cost of deployed software

Which of the following provides an IS auditor assurance that the interface between a point-of-sale (POS) system and the general ledger is transferring sales data completely and accurately?

• A.Nightly batch processing has been replaced with real-time processing.
• B.Monthly bank statements are reconciled without exception.
• C.Electronic copies of customer sales receipts are maintained.
• D.The data transferred over the POS interface is encrypted.