Free Access ISACA.CISA.v2021-09-28.q199 Practice Test (Page 16)

Question 71

Which of the following should be the PRIMARY concern of an IS auditor during a review of an external IT service level agreement (SLA) for computer operations?

A.Changes in services are not tracked

B.Vendor has exclusive control of IT resources

C.No employee succession plan

D.Lack of software escrow provisions

Question 72

Which of the following observations should be of GREATEST concern to an IS auditor reviewing a hosted virtualized environment where each guest operating system (OS) is r

A.There are file shares between the host OS and the guest OS

B.The test environment of the applications is in a separate guest OS

C.All virtual machines are launching an application backup job at the same time

D.Access to virtualization utilities and tools in the host is not restricted

Question 73

An airlines online booking system uses an automated script that checks whether fares are within the defined threshold of what is reasonable before the fares are displayed on the website. Which type of control is in place?

A.Corrective control

B.Compensating control

C.Detective control

D.Preventer control

Question 74

Which of the following is the BEST solution to minimize risk from security flaws introduced by developers using open source libraries?

A.Technical documentation review policies

B.Checks of dependencies between code libraries

C.Security business impact analysis (BIA)

D.Dynamic application security testing tools

Question 75

Reconciliations have identified data discrepancies between an enterprise data warehouse and a revenue system for key financial reports. What is the GREATEST risk to the organization in this situation?

A.Financial reports may be delayed.

B.Decisions may be made based on incorrect information

C.The key financial reports may no longer be produced.

D.Undetected fraud may occur.

Other Version: 4551ISACA.CISA.v2025-05-24.q773; 1602ISACA.CISA.v2024-10-22.q310; 4136ISACA.CISA.v2023-10-02.q715; 3737ISACA.CISA.v2023-03-29.q119; 2386ISACA.CISA.v2023-02-09.q181; 1498ISACA.CISA.v2023-02-06.q107; 3051ISACA.CISA.v2022-08-28.q129; 4218ISACA.CISA.v2022-02-25.q148; 126ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 5623ISACA.CISA.v2021-11-11.q194; 8809ISACA.CISA.v2021-10-08.q198; 12254ISACA.CISA.v2021-09-11.q201

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 158PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 148Salesforce.Data-Architect.v2025-09-05.q216; 143Adobe.AD0-E605.v2025-09-05.q50

Question 71

Question 72

Question 73

Question 74

Question 75

Download PDF File