Free Access ISACA.CISA.v2021-09-28.q199 Practice Test (Page 7)

Question 26

Which of the following should be of MOST concern lo an IS auditor reviewing the public key infrastructure (PKI) for enterprise email?

A.The private key certificate has not been updated.

B.The certificate practice statement has not been published.

C.The PKI policy has not been updated within the last year.

D.The certificate revocation list has not been updated.

Question 27

Which of the following should be the PRIMARY objective of a migration audit?

A.Business continuity

B.System performance

C.Data integrity

D.Control adequacy

Question 28

An IS auditor attempts to sample for variables in a population of items with wide differences in values but determines that an unreasonably large number of sample items must be selected to produce the desired confidence level. In this situation, which of the following is the BEST audit decision?

A.Select a stratified sample

B.Lower the desired confidence level

C.Allow more time and test the required sample

D.Select a judgmental sample

Question 29

An IS auditor s role in privacy and security is to:

A.assist the governance steering committee with implementing a security policy.

B.implement risk management methodologies.

C.verify compliance with applicable laws.

D.assist in developing an IS security strategy.

Question 30

Audit management has just completed the annual audit plan for the upcoming year, which consists entirely of high-risk processor. However it is determined that there are insufficient resources to execute the plan. What should be done NEXT?

A.Remove audit from the annual plan to better match the number of resources available.

B.Reduce the scope of the audit to better match the number of resources available

C.Present the annual plan to the audit committee and ask for more resources

D.Review the audit plan and defer some audits to the subsequent year

Other Version: 4518ISACA.CISA.v2025-05-24.q773; 1572ISACA.CISA.v2024-10-22.q310; 4135ISACA.CISA.v2023-10-02.q715; 3714ISACA.CISA.v2023-03-29.q119; 2375ISACA.CISA.v2023-02-09.q181; 1492ISACA.CISA.v2023-02-06.q107; 3046ISACA.CISA.v2022-08-28.q129; 4199ISACA.CISA.v2022-02-25.q148; 126ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 5606ISACA.CISA.v2021-11-11.q194; 8786ISACA.CISA.v2021-10-08.q198; 12236ISACA.CISA.v2021-09-11.q201

Latest Upload: 107Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 156TheSecOpsGroup.CNSP.v2025-09-08.q20; 207CFAInstitute.ESG-Investing.v2025-09-08.q173; 154PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 144Salesforce.Data-Architect.v2025-09-05.q216; 136Adobe.AD0-E605.v2025-09-05.q50; 177Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 26

Question 27

Question 28

Question 29

Question 30

Download PDF File