Free Access ISACA.CISA.v2026-01-26.q999 Practice Test (Page 61)

Question 296

Which of the following IT resource management practices is MOST Important for an IS auditor to verify when evaluating third-party outsourcing relationships?

A.Service level agreements (SLAs) in external contracts are monitored.

B.Operational level agreements (OLAs) for departments and projects are monitored

C.Management regularly meets with the service provider

D.An IT strategy for dividing activities among multiple suppliers is in place.

Question 297

Which of the following would BEST help prioritize various projects in an organization's IT portfolio?

A.Total cost of ownership (TCO)

B.Enterprise architecture (EA)

C.Industry trends

D.Business cases

Question 298

An IS auditor identifies that a legacy application to be decommissioned in three months cannot meet the security requirements established by the current policy.
What is the BEST way for the auditor to address this issue?

A.Verify management has approved a policy exception to accept the risk.

B.Take no action since the application will be decommissioned in three months.

C.Inform the IT director of the policy noncompliance.

D.Recommend the application be patched to meet requirements.

Question 299

Which of the following should an IS auditor review FIRST when evaluating incident management procedures?

A.Command center monitoring

B.Root cause analysis steps

C.Prioritization criteria

D.Peer review requirements

Question 300

Which of the following BEST indicates that the effectiveness of an organization's security awareness program has improved?

A.A decrease in the number of information security audit findings

B.An increase in the number of staff who complete awareness training

C.An increase in the number of phishing emails reported by employees

D.A decrease in the number of malware outbreaks

Other Version: 6725ISACA.CISA.v2026-02-11.q999; 12045ISACA.CISA.v2025-05-24.q773; 4976ISACA.CISA.v2024-10-22.q310; 11266ISACA.CISA.v2023-10-02.q715; 5631ISACA.CISA.v2023-03-29.q119; 4645ISACA.CISA.v2023-02-09.q181; 2856ISACA.CISA.v2023-02-06.q107; 4443ISACA.CISA.v2022-08-28.q129; 6126ISACA.CISA.v2022-02-25.q148; 130ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 7778ISACA.CISA.v2021-11-11.q194; 11192ISACA.CISA.v2021-10-08.q198; 12298ISACA.CISA.v2021-09-28.q199; 14917ISACA.CISA.v2021-09-11.q201

Latest Upload: 128VMware.3V0-23.25.v2026-09-17.q73; 117Workday.Workday-Adaptive-Planning.v2026-09-17.q20; 122SAP.C_ACDET.v2026-09-17.q20; 119Appian.ACD-301.v2026-09-17.q16; 217Google.Professional-Cloud-DevOps-Engineer.v2026-09-16.q209; 183AAPC.CPC.v2026-09-16.q132; 125HP.HPE0-J82.v2026-09-16.q26; 200F5.303.v2026-09-16.q147; 193PaloAltoNetworks.NGFW-Engineer.v2026-09-16.q105; 138Workday.Workday-Pro-Recruiting.v2026-09-15.q19

Question 296

Question 297

Question 298

Question 299

Question 300

Download PDF File