Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 561–565 (page: 114)

Updated On: 10-Feb-2026

Which of the following is the MOST important consideration for an IS auditor when assessing the adequacy of an organization's information security policy?

  1. Business objectives
  2. Alignment with the IT tactical plan
  3. Compliance with industry best practice
  4. IT steering committee minutes

Answer(s): A



Which of the following is the GREATEST security risk associated with data migration from a legacy human resources (HR) system to a cloud-based system?

  1. System performance may be impacted by the migration.
  2. Records past their retention period may not be migrated to the new system.
  3. Data from the source and target system may have different data formats.
  4. Data from the source and target system may be intercepted.

Answer(s): D



An audit has identified that business units have purchased cloud-based applications without IT's support. What is the GREATEST risk associated with this situation?

  1. The application purchases did not follow procurement policy.
  2. The applications may not reasonably protect data.
  3. The applications could be modified without advanced notice.
  4. The applications are not included in business continuity plans (BCPs).

Answer(s): B



An IS audit team is evaluating the documentation related to the most recent application user-access review performed by IT and business management. It is determined the user list was not system-generated. Which of the following should be the GREATEST concern?

  1. Source of the user list reviewed
  2. Availability of the user list reviewed
  3. Confidentiality of the user list reviewed
  4. Completeness of the user list reviewed

Answer(s): D



An IS auditor finds that one employee has unauthorized access to confidential data. The IS auditor's BEST recommendation should be to:

  1. recommend corrective actions to be taken by the security administrator.
  2. reclassify the data to a lower level of confidentiality.
  3. implement a strong password schema for users.
  4. require the business owner to conduct regular access reviews.

Answer(s): A



Viewing page 114 of 366
Viewing questions 566 - 570 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!