Free Access ISACA.CISA.v2025-05-24.q773 Practice Test (Page 107)

Question 526

Talking about the different approaches to security in computing, the principle of regarding the computer system itself as largely an untrusted system emphasizes:

A.most privilege

B.full privilege

C.least privilege

D.null privilege

E.None of the choices.

Question 527

An organization's current end-user computing practices include the use of a spreadsheet for financial statements. Which of the following is the GREATEST concern?

A.The spreadsheet is not maintained by IT.

B.Formulas are not protected against unintended changes.

C.Operational procedures have not been reviewed in the current fiscal year

D.The spreadsheet contains numerous macros.

Question 528

Management has agreed to perform multiple remediation actions in response to an audit issue, including the implementation of a new control. Which of the following is the BEST time for an IS auditor to perform an audit follow-up of this issue?

A.After management has completed the required actions

B.When audit resources are available

C.When management resources are available

D.After the new control has been in place for one year

Question 529

Which of the following would an IS auditor consider to be the MOST important to review when conducting a business continuity audit?

A.A hot site contracted and available as needed.

B.A business continuity manual is available and current.

C.insurance coverage is adequate and premiums are current.

D.Media backups are performed on a timely basis and stored offsite.

Question 530

When auditing a quality assurance plan, an IS auditor should be MOST concerned if the:

A.quality assurance function is separate from the programming function.

B.SDLC is coupled with the quality assurance plan.

C.quality assurance function is periodically reviewed by internal audit.

D.scope of quality assurance activities is undefined.

Other Version: 1635ISACA.CISA.v2024-10-22.q310; 4137ISACA.CISA.v2023-10-02.q715; 3741ISACA.CISA.v2023-03-29.q119; 2398ISACA.CISA.v2023-02-09.q181; 1498ISACA.CISA.v2023-02-06.q107; 3051ISACA.CISA.v2022-08-28.q129; 4218ISACA.CISA.v2022-02-25.q148; 126ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 5623ISACA.CISA.v2021-11-11.q194; 8827ISACA.CISA.v2021-10-08.q198; 9801ISACA.CISA.v2021-09-28.q199; 12255ISACA.CISA.v2021-09-11.q201

Latest Upload: 104Oracle.1z0-1196-25.v2025-09-12.q18; 103NetworkAppliance.NS0-162.v2025-09-12.q86; 144OCEG.GRCP.v2025-09-11.q211; 106HP.HPE0-V27.v2025-09-11.q78; 122Oracle.1Z0-1057-23.v2025-09-10.q47; 157Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 136SAP.C-S4EWM-2023.v2025-09-08.q83; 180TheSecOpsGroup.CNSP.v2025-09-08.q20; 254CFAInstitute.ESG-Investing.v2025-09-08.q173; 238PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132

Question 526

Question 527

Question 528

Question 529

Question 530

Download PDF File