Free Access ISACA.CISA.v2026-01-26.q999 Practice Test (Page 43)

Question 206

An IS auditor plans to review all access attempts to a video-monitored and proximity-card controlled
communications room. Which of the following would be MOST useful to the auditor?

A.System electronic log

B.Security incident log

C.Manual sign-in and sign-out log

D.Alarm system with CCTV

Question 207

An organization has outsourced the maintenance of its customer database to an external vendor, and the vendor has requested live data to test the performance of the database. Which of the following is MOST important for the IS auditor to recommend?

A.Ensure sensitive field data is anonymized by random characters.

B.Ensure data transfer details are specified in the service engagement contract.

C.Ensure the data is backed up before providing it to the vendor.

D.Ensure both parties agree the data will be destroyed after the testing is complete.

Question 208

An IT department is unaware of spreadsheets and databases that have been created by business end users to support their respective operations Which of the following is the GREATEST risk in this situation?

A.End-user solutions may not have proper documentation

B.End-user developed systems may be inefficient

C.End-user solutions may not be protected by IT general controls

D.End-user developed systems may duplicate data

Question 209

An IS auditor has been assigned to review IT structures and activities recently outsourced to various providers. Which of the following should the IS auditor determine FIRST?

A.That an audit clause is present in all contracts

B.That theSLA of each contract is substantiated by appropriate KPIs

C.That the contractual warranties of the providers support the business needs of the organization

D.That at contract termination, support is guaranteed by each outsourcer for new outsourcers

Question 210

Which of the following is MOST important for an IS auditor to review when evaluating the effectiveness of an organization's incident response process?

A.Past incident response actions

B.Incident response staff experience and qualifications

C.Results from management testing of incident response procedures

D.Incident response roles and responsibilities

Other Version: 6727ISACA.CISA.v2026-02-11.q999; 12045ISACA.CISA.v2025-05-24.q773; 4976ISACA.CISA.v2024-10-22.q310; 11268ISACA.CISA.v2023-10-02.q715; 5631ISACA.CISA.v2023-03-29.q119; 4645ISACA.CISA.v2023-02-09.q181; 2856ISACA.CISA.v2023-02-06.q107; 4443ISACA.CISA.v2022-08-28.q129; 6126ISACA.CISA.v2022-02-25.q148; 130ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 7778ISACA.CISA.v2021-11-11.q194; 11192ISACA.CISA.v2021-10-08.q198; 12298ISACA.CISA.v2021-09-28.q199; 14917ISACA.CISA.v2021-09-11.q201

Latest Upload: 132VMware.3V0-23.25.v2026-09-17.q73; 117Workday.Workday-Adaptive-Planning.v2026-09-17.q20; 122SAP.C_ACDET.v2026-09-17.q20; 119Appian.ACD-301.v2026-09-17.q16; 217Google.Professional-Cloud-DevOps-Engineer.v2026-09-16.q209; 183AAPC.CPC.v2026-09-16.q132; 125HP.HPE0-J82.v2026-09-16.q26; 201F5.303.v2026-09-16.q147; 193PaloAltoNetworks.NGFW-Engineer.v2026-09-16.q105; 138Workday.Workday-Pro-Recruiting.v2026-09-15.q19

Question 206

Question 207

Question 208

Question 209

Question 210

Download PDF File