Free Access ISACA.CISA.v2021-10-08.q198 Practice Test (Page 16)

Question 71

Code changes are compiled and placed in a change folder by the developer. An implementation learn migrates changes to production from the change folder. Which of the following BEST indicates separation of duties is in place during the migration process?

A.A second individual performs code review before the change is released to production.

B.The implementation team does not have experience writing code.

C.The implementation team does not have access to change the source code.

D.The developer approves changes prior to moving them to the change folder.

Question 72

What would be of GREATEST concern to an IS auditor observing shared key cards being utilized to access an organization's data center?

A.The inability to identify who has entered the data center

B.The lack of a multi-factor authentication system

C.The lack of enforcement of organizational policy and procedures

D.The inability to track the number of misplaced cards

Question 73

An organization with high availability resource requirements is selecting a provider for cloud computing.
Which of the following would cause the GREATEST concern to an IS auditor? The provider:

A.hosts systems for the organization's competitor.

B.is not internationally certified for high availability.

C.deploys patches automatically without testing.

D.does not store backup media offsite.

Question 74

Which of the following observations noted during a review of the organization s social media practices should be of MOST concern to the IS auditor?

A.Not all employees using social media have attended the security awareness program.

B.More than one employee is authorized to publish on social media on behalf of the organization

C.The organization does not require approval for social media posts.

D.The organization does not have a documented social media policy.

Question 75

An organization processing high volumes of financial transactions has implemented log file analysis on a central log server to continuously monitor compliance with its fraud policy. Which of the following poses the GREATEST risk to this control?

A.IT operations staff are able to stop the payment processing system.

B.Data entry staff have privileged access to the log server.

C.IT operations staff have the right to restart the log server.

D.Software developers have read access to the log server.

Other Version: 4553ISACA.CISA.v2025-05-24.q773; 1604ISACA.CISA.v2024-10-22.q310; 4136ISACA.CISA.v2023-10-02.q715; 3738ISACA.CISA.v2023-03-29.q119; 2386ISACA.CISA.v2023-02-09.q181; 1498ISACA.CISA.v2023-02-06.q107; 3051ISACA.CISA.v2022-08-28.q129; 4218ISACA.CISA.v2022-02-25.q148; 126ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 5623ISACA.CISA.v2021-11-11.q194; 9791ISACA.CISA.v2021-09-28.q199; 12254ISACA.CISA.v2021-09-11.q201

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 223CFAInstitute.ESG-Investing.v2025-09-08.q173; 158PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 149Salesforce.Data-Architect.v2025-09-05.q216; 144Adobe.AD0-E605.v2025-09-05.q50

Question 71

Question 72

Question 73

Question 74

Question 75

Download PDF File