Free Access ISACA.CISA.v2021-09-28.q199 Practice Test (Page 14)

Question 61

An IS auditor is testing employee access to a large financial system and must select a sample from the current employee list provided by the auditee. Which of the following is the MOST reliable sample source to support this testing1?

A.A system-generated list of accounts with access levels

B.A system access spreadsheet provided by the system administration.

C.Previous audit reports generated by a third party

D.Human resources (HR) documents signed by employees' managers

Question 62

During an exit interview senior management disagrees with some of the facts presented in the draft audit report and wants them removed from the report Which of the following would be the auditor's BEST course of action?

A.Revise the assessment based on senior management's objections.

B.Gather evidence to analyze senior management's objections

C.Finalize the draft audit report without changes

D.Escalate the issue to audit management

Question 63

Which of the following is the MOST likely cause of a successful firewall penetration?

A.Firewall misconfiguration by the administrator

B.Virus infection

C.Loophole m firewall vendor's code

D.Use of a Trojan to bypass the firewall

Question 64

A bank has implemented a new accounting system. Which of the following is the BEST lime for an IS auditor to perform a post-implementation review?

A.After user acceptance testing (UAT) is completed

B.As close to go-live as possible

C.One full year after go-live

D.After the first reporting cycle

Question 65

The MOST important reason why an IT risk assessment should be updated on a regular basis is to:

A.comply with data classification changes.

B.comply with risk management policies

C.react to changes in the IT environment.

D.utilize IT resources in a cost-effective manner.

Other Version: 4531ISACA.CISA.v2025-05-24.q773; 1587ISACA.CISA.v2024-10-22.q310; 4135ISACA.CISA.v2023-10-02.q715; 3724ISACA.CISA.v2023-03-29.q119; 2379ISACA.CISA.v2023-02-09.q181; 1498ISACA.CISA.v2023-02-06.q107; 3050ISACA.CISA.v2022-08-28.q129; 4213ISACA.CISA.v2022-02-25.q148; 126ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 5615ISACA.CISA.v2021-11-11.q194; 8796ISACA.CISA.v2021-10-08.q198; 12244ISACA.CISA.v2021-09-11.q201

Latest Upload: 101OCEG.GRCP.v2025-09-11.q211; 101HP.HPE0-V27.v2025-09-11.q78; 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 222CFAInstitute.ESG-Investing.v2025-09-08.q173; 156PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 146Salesforce.Data-Architect.v2025-09-05.q216; 140Adobe.AD0-E605.v2025-09-05.q50

Question 61

Question 62

Question 63

Question 64

Question 65

Download PDF File