Free Access ISACA.CISA.v2021-09-28.q199 Practice Test (Page 30)

Question 141

When evaluating an IT organizational structure, which of the following is MOST important to ensure has been documented?

A.Human resources (HR) policy on organizational changes

B.Provisions for cross-training

C.Succession and promotion plans

D.Job functions and duties

Question 142

A user of a telephone banking system has forgotten his personal identification number (PIN), after the user has been authenticated, the BEST method of issuing a new pin is to have:

A.Banking personnel verbally assign a new PIN

B.The user enter a new PIN twice

C.Banking personnel assign the user a new PIN via email

D.A randomly generated pin communicated by banking personnel

Question 143

An e-commerce enterprise's disaster recovery (DR) site has 30% less processing capability than the primary site. Based on this information, which of the following presents the GREATEST risk?

A.No disaster recovery plan (DRP) testing has been performed during the last six months.

B.The DR site has not undergone testing to confirm its effectiveness.

C.The DR site is in a shared location that hosts multiple other enterprises.

D.Network firewalls and database firewalls at the DR site do not provide high availability.

Question 144

Which of the following is the BEST way to detect system security breaches?

A.Conducting frequent vulnerability scans

B.Ensuring maximum interoperability among systems throughout the organization

C.Conducting continuous monitoring with an automated system security tool

D.Performing intrusion tests on a regular basis

Question 145

When developing metrics to measure the contribution of IT to the achievement of business goals, the MOST important consideration is that the metrics:

A.are expressed in terms of how IT risk impacts the achievement of business goals.

B.provide quantitative measurement of IT initiatives in relation with business targets,

C.are used by similar industries to measure the effect of IT on business strategy.

D.measure the effectiveness of IT controls in the achievement of IT strategy.

Other Version: 4544ISACA.CISA.v2025-05-24.q773; 1595ISACA.CISA.v2024-10-22.q310; 4136ISACA.CISA.v2023-10-02.q715; 3737ISACA.CISA.v2023-03-29.q119; 2383ISACA.CISA.v2023-02-09.q181; 1498ISACA.CISA.v2023-02-06.q107; 3051ISACA.CISA.v2022-08-28.q129; 4218ISACA.CISA.v2022-02-25.q148; 126ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 5623ISACA.CISA.v2021-11-11.q194; 8809ISACA.CISA.v2021-10-08.q198; 12249ISACA.CISA.v2021-09-11.q201

Latest Upload: 103OCEG.GRCP.v2025-09-11.q211; 102HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 222CFAInstitute.ESG-Investing.v2025-09-08.q173; 158PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 147Salesforce.Data-Architect.v2025-09-05.q216; 142Adobe.AD0-E605.v2025-09-05.q50

Question 141

Question 142

Question 143

Question 144

Question 145

Download PDF File