Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 556–560 (page: 113)

Updated On: 10-Feb-2026

Which of the following is the PRIMARY objective of baselining the IT control environment?

  1. Define process and control ownership.
  2. Ensure IT security strategy and policies are effective.
  3. Align IT strategy with business strategy.
  4. Detect control deviations.

Answer(s): D



Which of the following is the PRIMARY purpose of conducting an IS audit follow-up?

  1. To align IS audit activities with business objectives
  2. To help management prioritize related risk mitigation activities
  3. To determine the effectiveness of management's responses to risk
  4. To obtain agreement with management on action plan status

Answer(s): C



Which of the following is the MOST effective control for protecting the confidentiality and integrity of data stored unencrypted on virtual machines?

  1. Monitor access to stored images and snapshots of virtual machines
  2. Restrict access to images and snapshots of virtual machines
  3. Review logical access controls on virtual machines regularly
  4. Limit creation of virtual machine images and snapshots

Answer(s): B



Which of the following is the MOST likely reason an organization would use Platform as a Service (PaaS)?

  1. To operate third-party hosted applications
  2. To install and manage operating systems
  3. To establish a network and security architecture
  4. To develop and integrate its applications

Answer(s): D



Which of the following is the BEST control to prevent the transfer of files to external parties through instant messaging (IM) applications?

  1. File level encryption
  2. Application level firewalls
  3. Instant messaging policy
  4. File Transfer Protocol (FTP)

Answer(s): C



Viewing page 113 of 366
Viewing questions 561 - 565 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!