support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. ISACA
  4. CISA

Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 521–525 (page: 106)

Updated On: 10-Feb-2026
Page 106 of 366
PDF with 1823 Questions

Which of the following is the PRIMARY concern when negotiating a contract for a hot site?

  1. Complete testing of the recovery plan
  2. Availability of the site in the event of multiple disaster declarations
  3. Reciprocal agreements with other organizations
  4. Coordination with the site staff in the event of multiple disaster declarations

Answer(s): B



An IS auditor identifies that a legacy application to be decommissioned in three months cannot meet the security requirements established by the current policy.
What is the BEST way for the auditor to address this issue?

  1. Inform the IT director of the policy noncompliance.
  2. Verify management has approved a policy exception to accept the risk.
  3. Recommend the application be patched to meet requirements.
  4. Take no action since the application will be decommissioned in three months.

Answer(s): B



Which of the following should be done FIRST when planning a penetration test?

  1. Define the testing scope.
  2. Determine reporting requirements for vulnerabilities.
  3. Obtain management consent for the testing.
  4. Execute nondisclosure agreements (NDAs).

Answer(s): C



Which of the following is the BEST reason for an organization to use clustering?

  1. To decrease system response time
  2. To improve the recovery time objective (RTO)
  3. To improve system resiliency
  4. To facilitate faster backups

Answer(s): C



Which of the following is necessary for effective risk management in IT governance?

  1. Local managers are solely responsible for risk evaluation.
  2. Risk management strategy is approved by the audit committee.
  3. Risk evaluation is embedded in management processes.
  4. IT risk management is separate from corporate risk management.

Answer(s): C



  PDF
Viewing page 106 of 366
Viewing questions 526 - 530 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!