Practice CISA Questions With Certification guide Q&A from Training Expert Exams4sures
Free ISACA CISA Test Practice Test Questions Exam Dumps
Registration of CISA exam through the email address:
You can also choose to register online if you have valid information about yourself. You need to have a valid email address to login and a credit or debit card to pay the examination fee. Furthermore, you can set an appointment for your exam or take it at a time convenient to you. Besides, you need to ensure that you are carrying all the necessary information with you while clicking on the registration button online. The process is very simple, and you can also ask online if there are any doubts that you have in mind while registering.
The CISA certification exam is an essential requirement for professionals seeking to advance their careers in IT audit, assurance, control, and security. It provides a comprehensive and practical understanding of information systems auditing and control, as well as the skills and knowledge required to identify and mitigate risks to an organization's information assets. Certified Information Systems Auditor certification is also highly valued by employers, who often require CISA certification as a prerequisite for employment in the IT audit and assurance field.
The CISA certification is an excellent choice for individuals who want to advance their career in the IT audit field. Certified Information Systems Auditor certification provides a comprehensive understanding of IT governance, risk management, and information security, which are critical skills for IT professionals in today's digital age. With the CISA certification, professionals can demonstrate their expertise and knowledge, which can lead to new career opportunities and higher salaries.
NEW QUESTION # 628
.What supports data transmission through split cable facilities or duplicate cable facilities?
- A. Alternate routing
- B. Diverse routing
- C. Dual routing
- D. Redundant routing
Answer: B
Explanation:
Diverse routing supports data transmission through split cable facilities, or duplicate cable facilities.
NEW QUESTION # 629
During a review of a production schedule, an IS auditor observes that a staff member is not complying with mandatory operational procedures-The auditor's NEXT step should be to:
- A. include the noncompliance in the audit report.
- B. determine why the procedures were not followed.
- C. note the noncompliance in the audit working capers.
- D. issue an audit memorandum identifying the noncompliance.
Answer: A
NEW QUESTION # 630
You should keep all computer rooms at reasonable temperatures, which is in between:
(Choose all that apply.)
- A. 20 - 35 degrees Fahrenheit
- B. 10 - 25 degrees Celsius
- C. 60 - 75 degrees Fahrenheit
- D. 30 - 45 degrees Fahrenheit
- E. 0 - 5 degrees Celsius
- F. 1 - 15 degrees Celsius
Answer: B,C
Explanation:
Section: Protection of Information Assets
Explanation:
You should keep all computer rooms at reasonable temperatures, which is in between 60 - 75 degrees Fahrenheit or 10 - 25 degrees Celsius. You should also keep humidity levels at 20 - 70 percent.
NEW QUESTION # 631
A global organization's policy states that all workstations must be scanned for malware each day. Which of the following would provide an IS auditor with the BEST evidence of continuous compliance with this policy?
- A. Penetration testing results
- B. Management attestation
- C. Anti-malware tool audit logs
- D. Recent malware scan reports
Answer: C
Explanation:
Anti-malware tool audit logs would provide an IS auditor with the best evidence of continuous compliance with the global organization's policy that states that all workstations must be scanned for malware each day. Anti-malware tool audit logs are records that capture the activities and events related to the anti-malware software installed on the workstations, such as scan schedules, scan results, updates, alerts, and actions taken1. These logs can help the IS auditor to verify that the anti-malware software is functioning properly, that the scans are performed regularly and effectively, and that any malware incidents are detected and resolved in a timely manner2. Anti-malware tool audit logs can also help the IS auditor to identify any gaps or weaknesses in the anti-malware policy or implementation, and to provide recommendations for improvement3.
The other options are not the best evidence of continuous compliance with the anti-malware policy. Penetration testing results are reports that show the vulnerabilities and risks of the workstations and network from an external or internal attacker's perspective4. While penetration testing can help to assess the security posture and resilience of the organization, it does not provide information on the daily anti-malware scans or their outcomes. Management attestation is a statement or declaration from the management that they have complied with the anti-malware policy5. While management attestation can demonstrate commitment and accountability, it does not provide objective or verifiable evidence of compliance. Recent malware scan reports are documents that show the summary or details of the latest anti-malware scans performed on the workstations. While recent malware scan reports can indicate the current status and performance of the anti-malware software, they do not provide historical or comprehensive evidence of compliance.
References:
* Malwarebytes Anti-Malware (MBAM) log collection and threat reports ...
* Malicious Behavior Detection using Windows Audit Logs
* PCI Requirement 5.2 - Ensure all Anti-Virus Mechanisms are Current ...
* Management Attestation - an overview | ScienceDirect Topics
* How to Read a Malware Scan Report | Techwalla
NEW QUESTION # 632
In transport mode, the use of the Encapsulating Security Payload (ESP) protocol is advantageous over the Authentication Header (AH) protocol because it provides:
- A. data origin authentication.
- B. connectionless integrity.
- C. antireplay service.
- D. confidentiality.
Answer: D
Explanation:
Both protocols support choices A, B and C, but only the ESP protocol provides confidentiality via encryption.
NEW QUESTION # 633
Compared to developing a system in-house, acquiring a software package means that the need for testing by end users is:
- A. reduced.
- B. eliminated.
- C. unchanged.
- D. increased.
Answer: D
NEW QUESTION # 634
When physical destruction IS not practical, which of the following is the MOST effective means of disposing of sensitive data on a hard disk?
- A. Encrypting the disk
- B. Deleting files sequentially
- C. Overwriting multiple times
- D. Reformatting
Answer: C
Explanation:
The correct answer is A. Overwriting multiple times. Overwriting is a method of securely erasing data from a hard disk by replacing the existing data with random or meaningless data, making it difficult or impossible to recover the original data1. Overwriting multiple times, also known as multiple-pass overwriting, is a more effective way of disposing of sensitive data than overwriting once, as it reduces the possibility of residual traces of data that could be recovered by advanced techniques2. Overwriting multiple times can be done by using specialized software tools that follow certain standards or algorithms, such as the US Department of Defense's DoD 5220.22-M or the Gutmann method3.
NEW QUESTION # 635
When preparing an audit report the IS auditor should ensure that the results are supported by:
- A. sufficient and appropriate audit evidence.
- B. an organizational control self-assessment.
- C. statements from IS management.
- D. workpapers of other auditors.
Answer: A
Explanation:
ISACA's standard on 'reporting' requires the IS auditor have sufficient and appropriate audit evidence to support the reported results. Statements from IS management provide a basis for obtaining concurrence on matters that cannot be verified with empirical evidence. The report should be based on evidence collected during the course of the review even though the auditor may have access to the work papers of other auditors. The results of an organizational control self-assessment (CSA) could supplement the audit findings. Choices A, B and C might be referenced during an audit but, of themselves, would not be considered a sufficient basis for issuing a report.
NEW QUESTION # 636
An IS auditor is analyzing a sample of accesses recorded on the system log of an application.
The auditor intends to launch an intensive investigation if one exception is found. Which sampling method would be appropriate?
- A. Stratified sampling
- B. Discovery sampling
- C. Judgmental sampling
- D. Variable sampling
Answer: B
NEW QUESTION # 637
Which of the following methods will BEST reduce the risk associated with the transition to a new system using technologies that are not compatible with the old system?
- A. Parallel changeover
- B. Modular changeover
- C. Phased operation
- D. Pilot operation
Answer: A
Explanation:
The best method to reduce the risk associated with the transition to a new system using technologies that are not compatible with the old system is parallel changeover. Parallel changeover is a method of system conversion that involves running both the old and the new systems simultaneously for a period of time, until the new system is verified to be working correctly and completely. Parallel changeover can help reduce the risk of data loss, errors, or disruptions that may occur due to the incompatibility of the technologies, as well as provide a backup option in case of failure or malfunction of the new system. Parallel changeover can also help users compare and validate the results of both systems, and facilitate their training and adaptation to the new system.
Modular changeover is a method of system conversion that involves replacing one module or component of the old system with a corresponding module or component of the new system at a time, until the entire system is replaced. Modular changeover can help reduce the complexity and scope of the conversion, as well as minimize the impact on the users and operations. However, modular changeover may not be feasible or effective when the technologies of the old and new systems are not compatible, as it may create integration or interoperability issues among the modules.
Phased operation is a method of system conversion that involves implementing the new system in stages or increments, each with a subset of functions or features, until the entire system is operational. Phased operation can help reduce the risk and cost of implementing a large and complex system, as well as allow for testing and feedback at each stage. However, phased operation may not be suitable or efficient when the technologies of the old and new systems are not compatible, as it may require extensive modifications or adaptations to enable partial functionality.
Pilot operation is a method of system conversion that involves implementing the new system in a limited or controlled environment, such as a department or a location, before rolling it out to the entire organization.
Pilot operation can help test and evaluate the performance and usability of the new system, as well as identify and resolve any issues or problems before full-scale implementation. However, pilot operation may not be relevant or reliable when the technologies of the old and new systems are not compatible, as it may not reflect the actual conditions or challenges of operating both systems concurrently.
References:
* TRANSITION TO THE NEW SYSTEM - O'Reilly Media 1
* 10 Challenges To Think About When Upgrading From Legacy Systems - Forbes
NEW QUESTION # 638
A senior auditor is reviewing work papers prepared by a junior auditor indicating that a finding was removed
after the auditee said they corrected the problem. Which of the following would be the MOST appropriate
course of action for the senior auditor?
- A. Ask the auditee to retest
- B. Refer the issue to the audit director
- C. Approve the work papers as written
- D. Have the finding reinstated
Answer: D
Explanation:
Section: The process of Auditing Information System
Explanation
NEW QUESTION # 639
Which policy helps an auditor to gain a better understanding of biometrics system in an organization?
- A. BOMS Policy
- B. BIMS Policy
- C. BOS Policy
- D. BMS Policy
Answer: B
Explanation:
Explanation/Reference:
The auditor should use a Biometric Information Management System (BIMS) Policy to gain better understanding of the biometric system in use.
Management of Biometrics
Management of biometrics should address effective security for the collection, distribution and processing of biometrics data encompassing:
Data integrity, authenticity and non-repudiation
Management of biometric data across its life cycle - compromised of the enrollment, transmission and storage, verification, identification, and termination process
Usage of biometric technology, including one-to-one and one-to-many matching, for identification and authentication
Application of biometric technology for internal and external, as well as logical and physical access control Encapsulation of biometric data
Security of the physical hardware used throughout the biometric data life cycle Techniques for integrity and privacy protection of biometric data.
Management should develop and approve a Biometric Information Management and Security (BIMS) policy. The auditor should use the BIMS policy to gain better understanding of the biometric system in use.
With respect to testing, the auditor should make sure this policy has been developed and biometric information system is being secured appropriately.
The identification and authentication procedures for individual enrollment and template creation should be specified in BIMS policy.
The following were incorrect answers:
All other choices presented were incorrect answers because they are not valid policies.
The following reference(s) were/was used to create this question:
CISA review manual 2014 Page number 331 and 332
NEW QUESTION # 640
Which of the following is the BEST way to reduce sampling risk?
- A. Ensure each item has an equal chance to be selected
- B. Align the sampling approach with the one used by external auditors
- C. Assign experienced auditors to the sampling process.
- D. Plan the audit in accordance with generally accepted auditing principles
Answer: A
NEW QUESTION # 641
What should be the PRIMARY focus during a review of a business process improvement project?
- A. Business project plan
- B. Continuous monitoring plans
- C. The cost of new controls
- D. Business impact
Answer: D
NEW QUESTION # 642
Which of the following would be MOST critical for an IS auditor to look for when evaluating fire precautions in a manned data center located in the upper floor of a multi-story building?
- A. Adequacy of the HVAC system throughout the facility
- B. Documentations of regular inspections by the local fire department
- C. Existence of handheld fire extinguishers in highly visible locations
- D. Documentation of tested emergency evacuation plans
Answer: C
NEW QUESTION # 643
Which of the following would BEST enable alignment of IT with business objectives?
- A. Monitoring key performance indicators (KPls)
- B. Adopting industry best practices
- C. Leveraging an IT framework
- D. Completing an IT risk assessment
Answer: A
NEW QUESTION # 644
What should be a security manager's PRIMARY objective in the event of a security incident?
- A. Identify lapses in operational control effectiveness.
- B. Contain the threat and restore operations in a timely manner.
- C. Ensure that normal operations are not disrupted.
- D. Identify the source of the breach and how it was perpetrated.
Answer: B
Explanation:
Section: Information System Operations, Maintenance and Support
NEW QUESTION # 645
To confirm integrity for a hashed message, the receiver should use:
- A. a different hashing algorithm from the sender's to create a binary image of the file.
- B. the same hashing algorithm as the sender's to create a binary image of the file.
- C. a different hashing algorithm from the sender's to create a numerical representation of the file.
- D. the same hashing algorithm as the sender's to create a numerical representation of the file.
Answer: B
Explanation:
To confirm integrity for a hashed message, the receiver should use the same hashing algorithm as the sender' s to create a binary image of the file. A hashing algorithm is a mathematical function that transforms an input data into a fixed-length output value, called a hash or a digest. A hashing algorithm has two main properties:
it is one-way, meaning that it is easy to compute the hash from the input, but hard to recover the input from the hash; and it is collision-resistant, meaning that it is very unlikely to find two different inputs that produce the same hash. These properties make hashing algorithms useful for verifying the integrity of data, as any change in the input data will result in a different hash value. Therefore, to confirm integrity for a hashed message, the receiver should use the same hashing algorithm as the sender's to create a binary image of the file, which is a representation of the file in bits (0s and 1s). The receiver should then compare this binary image with the hash value sent by the sender. If they match, then the message has not been altered in transit.
If they do not match, then the message has been corrupted or tampered with.
References:
* Ensuring Data Integrity with Hash Codes
* Message Integrity
NEW QUESTION # 646
The GREATEST risk of database renormalization is:
- A. Incorrect metadata
- B. Decreased performance
- C. Loss of data confidentiality
- D. Loss of database integrity
Answer: B
NEW QUESTION # 647
When implementing an upgraded ERP system, which of the following is the MOST important consideration
for a go-live decision?
- A. Test cases
- B. Post-implementation review objectives
- C. Business case
- D. Rollback strategy
Answer: C
Explanation:
Section: Information System Acquisition, Development and Implementation
NEW QUESTION # 648
......
Prepare Top ISACA CISA Exam Audio Study Guide Practice Questions Edition: https://www.exams4sures.com/ISACA/CISA-practice-exam-dumps.html
Dumps Practice Exam Questions Study Guide for the CISA Exam: https://drive.google.com/open?id=18-psYIB3gJF22tnKcbdRAnygtu1btbuO