Free Access ISACA.CISA.v2021-09-28.q199 Practice Test (Page 6)

Question 21

A post-implementation review of a development project concludes that several business requirements were not reflected in the software requirement specifications. Which of the following should an IS auditor recommend to reduce this problem in the future?

A.Trace the changes to requirements back to all affected products.

B.Set up a configuration control board.

C.Write test cases from the user requirements.

D.Appoint a business unit representative.

Question 22

Which of the following is MOST important for the successful establishment of a security vulnerability management program?

A.A robust tabletop exercise plan

B.A tested incident response plan

C.An approved patching policy

D.A comprehensive asset inventory

Question 23

An IS auditor has obtained a large complex data set for analysis. Which of the following activities will MOST improve the output from the use of data analytics tools?

A.Data preparation

B.Data masking

C.Data classification

D.Data anonymization

Question 24

Which of the following poses the GREATEST security risk when implementing acquired application systems?

A.Social engineering

B.Default logon IDs

C.Lack of audit logs

D.Password length

Question 25

Which of the following observations should be of GREATEST concern to an IS auditor reviewing a large organization's virtualization environment?

A.An unused printer has been left connected to the host system.

B.Guest tools have been installed without sufficient access control,

C.Host inspection capabilities have been disabled

D.A rootkit was found on the host operating system

Other Version: 4518ISACA.CISA.v2025-05-24.q773; 1572ISACA.CISA.v2024-10-22.q310; 4135ISACA.CISA.v2023-10-02.q715; 3714ISACA.CISA.v2023-03-29.q119; 2375ISACA.CISA.v2023-02-09.q181; 1492ISACA.CISA.v2023-02-06.q107; 3046ISACA.CISA.v2022-08-28.q129; 4199ISACA.CISA.v2022-02-25.q148; 126ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 5606ISACA.CISA.v2021-11-11.q194; 8786ISACA.CISA.v2021-10-08.q198; 12236ISACA.CISA.v2021-09-11.q201

Latest Upload: 107Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 156TheSecOpsGroup.CNSP.v2025-09-08.q20; 207CFAInstitute.ESG-Investing.v2025-09-08.q173; 154PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 144Salesforce.Data-Architect.v2025-09-05.q216; 136Adobe.AD0-E605.v2025-09-05.q50; 177Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 21

Question 22

Question 23

Question 24

Question 25

Download PDF File