Free Access ISACA.CISA.v2026-09-24.q827 Practice Test (Page 55)

Question 266

An organization is considering moving one of its critical business applications to a cloud hosting service.
The cloud provider may not provide the same level of security for this application as the organization.
Which of the following will provide the BEST information to help maintain the security posture?

A.Risk assessment

B.Cloud security strategy

C.Vulnerability assessment

D.Risk governance framework

Question 267

Which of the following is the BEST approach for performing a business impact analysis (BIA) of a supply-chain management application?

A.Circulating questionnaires to key internal stakeholders

B.Interviewing groups of key stakeholders

C.Reviewing me organization s policies and procedures

D.Accepting IT personnel s view of business issues

Question 268

A legacy application is running on an operating system that is no longer supported by vendor, if the organization continues to use the current application, which of the application should be the IS auditor's GREATEST concern?

A.Inability to use the operating system due to potential licence issues

B.Increased cost of maintaining the system

C.Potential exploitation of zero-day vulnerabilities in the system

D.Inability to update the legacy application database

Question 269

Which of the following should be of GREATEST concern to an IS auditor when evaluating a new system's production readiness?

A.Projected benefits have not been realized.

B.Functional requirements have not been met.

C.A system defect was found during user acceptance testing.

D.Functional design documentation is not complete.

Question 270

The GREATEST risk when end users have access to a database at its system level, instead of through the application, is that the users can:

A.make unauthorized changes to the database directly, without an audit trail.

B.make use of a system query language (SQL) to access information.

C.remotely access the database.

D.update data without authentication.

Other Version: 7117ISACA.CISA.v2026-02-11.q999; 9908ISACA.CISA.v2026-01-26.q999; 12445ISACA.CISA.v2025-05-24.q773; 5069ISACA.CISA.v2024-10-22.q310; 11582ISACA.CISA.v2023-10-02.q715; 5706ISACA.CISA.v2023-03-29.q119; 4716ISACA.CISA.v2023-02-09.q181; 2922ISACA.CISA.v2023-02-06.q107; 4514ISACA.CISA.v2022-08-28.q129; 6200ISACA.CISA.v2022-02-25.q148; 130ISACA.Actualtestpdf.CISA.v2021-11-13.by.sarah.721q.pdf; 7812ISACA.CISA.v2021-11-11.q194; 11298ISACA.CISA.v2021-10-08.q198; 12507ISACA.CISA.v2021-09-28.q199; 15053ISACA.CISA.v2021-09-11.q201

Latest Upload: 113Apple.App-Development-with-Swift-Certified-User.v2026-09-30.q14; 121Microsoft.AB-210.v2026-09-30.q53; 129Salesforce.OmniStudio-Consultant.v2026-09-30.q102; 130InsuranceLicensing.Life-and-Accident-and-Health-or-Sickness-Producer-Combo.v2026-09-30.q93; 172Salesforce.Data-Architect.v2026-09-29.q136; 166Huawei.H19-321.v2026-09-29.q100; 123SAP.C_S4CPB.v2026-09-28.q7; 133CMAA.Construction-Manager.v2026-09-28.q23; 151PaloAltoNetworks.XDR-Engineer.v2026-09-28.q50; 157Anthropic.CCAR-F.v2026-09-27.q53

Question 266

Question 267

Question 268

Question 269

Question 270

Download PDF File