Free Access ISACA.CISA.v2023-03-29.q119 Practice Test (Page 21)

Question 96

In an environment that automatically reports all program changes, which of the following is the MOST efficient way to detect unauthorized changes to production programs?

A.Verifying user management approval of modifications

B.Periodically running and reviewing test data against production programs

C.Manually comparing code in production programs to controlled copies

D.Reviewing the last compile date of production programs

Question 97

During a follow-up audit, it was found that a complex security vulnerability of low risk was not resolved within the agreed-upon timeframe. IT has stated that the system with the identified vulnerability is being replaced and is expected to be fully functional in two months Which of the following is the BEST course of action?

A.Perform an ad hoc audit to determine if the vulnerability has been exploited

B.Recommend the finding be resolved prior to implementing the new system

C.Require documentation that the finding will be addressed within the new system

D.Schedule a meeting to discuss the issue with senior management

Question 98

Spreadsheets are used to calculate project cost estimates. Totals for each cost category are then keyed into the job-costing system. What is the BEST control to ensure that data is accurately entered into the system?

A.Reasonableness checks for each cost type

B.Validity checks, preventing entry of character data

C.Reconciliation of total amounts by project

D.Display back of project detail after entry

Question 99

Which of the following is a social engineering attack method?

A.An unauthorized person attempts to gain access to secure premises by following an authorized person through a secure door.

B.An intruder eavesdrops and collects sensitive information flowing through the network and sells it to third parties.

C.An employee is induced to reveal confidential IP addresses and passwords by answering questions over the phone.

D.A hacker walks around an office building using scanning tools to search for a wireless network to gain access.

Question 100

An organizations audit charier PRIMARILY:

A.documents the audit process and reporting standards.

B.formally records the annual and quarterly audit plans.

C.defines the auditors' code of conduct.

D.describes the auditors' authority to conduct audits.

Other Version: 4531ISACA.CISA.v2025-05-24.q773; 1589ISACA.CISA.v2024-10-22.q310; 4135ISACA.CISA.v2023-10-02.q715; 2383ISACA.CISA.v2023-02-09.q181; 1498ISACA.CISA.v2023-02-06.q107; 3050ISACA.CISA.v2022-08-28.q129; 4213ISACA.CISA.v2022-02-25.q148; 126ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 5620ISACA.CISA.v2021-11-11.q194; 8796ISACA.CISA.v2021-10-08.q198; 9785ISACA.CISA.v2021-09-28.q199; 12245ISACA.CISA.v2021-09-11.q201

Latest Upload: 101OCEG.GRCP.v2025-09-11.q211; 101HP.HPE0-V27.v2025-09-11.q78; 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 164TheSecOpsGroup.CNSP.v2025-09-08.q20; 222CFAInstitute.ESG-Investing.v2025-09-08.q173; 157PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 147Salesforce.Data-Architect.v2025-09-05.q216; 141Adobe.AD0-E605.v2025-09-05.q50

Question 96

Question 97

Question 98

Question 99

Question 100

Download PDF File