Free Access ISACA.CISA.v2026-09-24.q827 Practice Test (Page 53)

Question 256

Which of the following would be the MOST significant finding when reviewing a data backup process?

A.The data backup process is not documented.

B.The key to the data safe is kept by the backup administrator.

C.Recovery testing is not performed.

D.Tapes are not consistently rotated offsite.

Question 257

When conducting a follow-up audit on an organization s firewall configuration, the IS auditor discovered that the firewall had been integrated into a new system that provides both firewall and intrusion detection capabilities. The IS auditor should:

A.assess whether the integrated system addresses the identified risk

B.consider the follow-up audit unnecessary since the firewall is no longer being used

C.evaluate whether current staff is able to support the new system

D.review the compatibility of the new system with existing network controls

Question 258

Which of the following would protect the confidentiality of information sent in email messages?

A.Secure Hash Algorithm 1(SHA-1)

B.Digital signatures

C.Encryption

D.Digital certificates

Question 259

Which of the following is the BEST way to mitigate the risk associated with a document storage application that has a syncing feature that could allow malware to spread to other machines in the network?

A.Content inspection technologies should be used to scan files for sensitive data.

B.An audit should be conducted to detect shadow data and shadow IT in the network.

C.User behavior modeling and analysis should be performed to discover anomalies in user behavior.

D.All files should be scanned when they are uploaded to and downloaded from the application.

Question 260

Which of the following should be a PRIMARY control objective when designing controls for system interfaces?

A.Ensure peer-to-peer data transfers are minimized.

B.Ensure all data transferred through system interfaces is encrypted.

C.Ensure managed file transfer (MFT) systems have restart capability for interruptions.

D.Ensure data on the sending system is identical to the data on the receiving system.

Other Version: 7078ISACA.CISA.v2026-02-11.q999; 9847ISACA.CISA.v2026-01-26.q999; 12394ISACA.CISA.v2025-05-24.q773; 5057ISACA.CISA.v2024-10-22.q310; 11552ISACA.CISA.v2023-10-02.q715; 5698ISACA.CISA.v2023-03-29.q119; 4703ISACA.CISA.v2023-02-09.q181; 2915ISACA.CISA.v2023-02-06.q107; 4507ISACA.CISA.v2022-08-28.q129; 6193ISACA.CISA.v2022-02-25.q148; 130ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 7805ISACA.CISA.v2021-11-11.q194; 11287ISACA.CISA.v2021-10-08.q198; 12493ISACA.CISA.v2021-09-28.q199; 15028ISACA.CISA.v2021-09-11.q201

Latest Upload: 122Huawei.H19-321.v2026-09-29.q100; 108SAP.C_S4CPB.v2026-09-28.q7; 120CMAA.Construction-Manager.v2026-09-28.q23; 116PaloAltoNetworks.XDR-Engineer.v2026-09-28.q50; 142Anthropic.CCAR-F.v2026-09-27.q53; 167Huawei.H12-711_V4.0.v2026-09-27.q115; 131Fortinet.NSE6_FNC_AD-7.6.v2026-09-26.q46; 158PaloAltoNetworks.SSE-Engineer.v2026-09-25.q44; 266Oracle.1z0-071.v2026-09-25.q398; 141Salesforce.Analytics-Con-301.v2026-09-25.q44

Question 256

Question 257

Question 258

Question 259

Question 260

Download PDF File