Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 491–495 (page: 100)

Updated On: 10-Feb-2026

When evaluating the design of controls related to network monitoring, which of the following is MOST important for an IS auditor to review?

  1. Network topology diagrams
  2. Reports of network traffic analysis
  3. The ISP service level agreement
  4. Incident monitoring logs

Answer(s): A



Which of the following is MOST important for an organization to complete prior to developing its disaster recovery plan (DRP)?

  1. Business impact analysis (BIA)
  2. Comprehensive IT inventory
  3. Support staff skills gap analysis
  4. Risk assessment

Answer(s): A



Which of the following would be MOST time and cost efficient when performing a control self-assessment (CSA) for an organization with a large number of widely dispersed employees?

  1. Survey questionnaire
  2. Facilitated workshops
  3. Face-to-face interviews
  4. Top-down and bottom-up analysis

Answer(s): A



Which of the following is the BEST way to ensure that business continuity plans (BCPs) will work effectively in the event of a major disaster?

  1. Regularly update business impact assessments.
  2. Prepare detailed plans for each business function.
  3. Make senior managers responsible for their plan sections.
  4. Involve staff at all levels in periodic paper walk-through exercises.

Answer(s): D



Which of the following should be of MOST concern to an IS auditor reviewing the public key infrastructure (PKI) for enterprise email?

  1. The private key certificate has not been updated.
  2. The certificate revocation list has not been updated.
  3. The certificate practice statement has not been published.
  4. The PKI policy has not been updated within the last year.

Answer(s): B



Viewing page 100 of 366
Viewing questions 496 - 500 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!