Free Access ISACA.CISA.v2026-09-24.q827 Practice Test (Page 121)

Question 596

During a follow-up audit, an IS auditor finds that the auditee has updated virus scanner definitions without adopting the original audit recommendation to increase the frequency of using the scanner. The MOST appropriate action for the auditor is to:

A.conclude that the residual risk is beyond tolerable levels of risk.

B.prepare a follow-up audit report reiterating the recommendation.

C.modify the audit opinion based on the new information available.

D.escalate the issue to senior management.

Question 597

Which of the following is the MOST important control to implement when senior managers use
smartphones to access sensitive company information?

A.Mandatory virtual private network (VPN) connectivity

B.Centralized device administration

C.Strong passwords

D.Anti-malware on the devices

Question 598

An IS auditor is reviewing the physical security measures of an organization. Regarding the access card system, the IS auditor should be MOST concerned that:

A.nonpersonalized access cards are given to the cleaning staff, who use a sign-in sheet but show no proof of identity.

B.access cards are not labeled with the organization's name and address to facilitate easy return of a lost card.

C.card issuance and rights administration for the cards are done by different departments, causing unnecessary lead time for new cards.

D.the computer system used for programming the cards can only be replaced after three weeks in the event of a system failure.

Question 599

In a RACI model, which at the following roles must be assigned lo only one individual?.

A.accountable

B.Informed

C.Consumed

D.Responsible

Question 600

An IS auditor finds that irregularities have occurred and that auditee management has chosen to ignore them.
If reporting to external authorities is required which of the following is the BEST action for the IS auditor to take?

A.Submit the report to appropriate regulators immediately.

B.Obtain approval from auditee management to release the report.

C.Obtain approval from audit management to submit the report.

D.Obtain approval from both audit and auditee management to release the report.

Other Version: 7076ISACA.CISA.v2026-02-11.q999; 9846ISACA.CISA.v2026-01-26.q999; 12393ISACA.CISA.v2025-05-24.q773; 5057ISACA.CISA.v2024-10-22.q310; 11551ISACA.CISA.v2023-10-02.q715; 5698ISACA.CISA.v2023-03-29.q119; 4703ISACA.CISA.v2023-02-09.q181; 2915ISACA.CISA.v2023-02-06.q107; 4507ISACA.CISA.v2022-08-28.q129; 6193ISACA.CISA.v2022-02-25.q148; 130ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 7805ISACA.CISA.v2021-11-11.q194; 11287ISACA.CISA.v2021-10-08.q198; 12493ISACA.CISA.v2021-09-28.q199; 15028ISACA.CISA.v2021-09-11.q201

Latest Upload: 121Huawei.H19-321.v2026-09-29.q100; 108SAP.C_S4CPB.v2026-09-28.q7; 120CMAA.Construction-Manager.v2026-09-28.q23; 114PaloAltoNetworks.XDR-Engineer.v2026-09-28.q50; 142Anthropic.CCAR-F.v2026-09-27.q53; 165Huawei.H12-711_V4.0.v2026-09-27.q115; 130Fortinet.NSE6_FNC_AD-7.6.v2026-09-26.q46; 157PaloAltoNetworks.SSE-Engineer.v2026-09-25.q44; 256Oracle.1z0-071.v2026-09-25.q398; 141Salesforce.Analytics-Con-301.v2026-09-25.q44

Question 596

Question 597

Question 598

Question 599

Question 600

Download PDF File