Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 576–580 (page: 117)

Updated On: 10-Feb-2026

Which of the following should be reviewed FIRST when assessing the effectiveness of an organization's network security procedures and controls?

  1. Malware defenses
  2. Inventory of authorized devices
  3. Data recovery capability
  4. Vulnerability remediation

Answer(s): B



An IS auditor is reviewing an organization's business continuity plan (BCP) following a change in organizational structure with significant impact to business processes. Which of the following findings should be the auditor's GREATEST concern?

  1. Copies of the BCP have not been distributed to new business unit end users since the reorganization
  2. The most recent business impact analysis (BIA) was performed two years before the reorganization
  3. A test plan for the BCP has not been completed during the last two years
  4. Key business process end users did not participate in the business impact analysis (BIA)

Answer(s): B



An IS auditor reviewing a project to acquire an IT-based solution learns the risk associated with project failure has been assessed as high. What is the auditor's
BEST course of action?

  1. Reassess project costs to ensure they are within the organization's risk tolerance.
  2. Review benefits realization against the business case.
  3. Inform management about potential losses due to project failure.
  4. Review the risk monitoring process during project execution.

Answer(s): D



An IS auditor is reviewing an industrial control system (ICS) that uses older unsupported technology in the scope of an upcoming audit. What should the auditor consider the MOST significant concern?

  1. Technical specifications are not documented.
  2. Disaster recovery plans (DRPs) are not in place.
  3. Attack vectors are evolving for industrial control systems.
  4. There is a greater risk of system exploitation.

Answer(s): D



An IS auditor finds the log management system is overwhelmed with false positive alerts. The auditor's BEST recommendation would be to:

  1. recruit more monitoring personnel.
  2. establish criteria for reviewing alerts.
  3. reduce the firewall rules.
  4. fine tune the intrusion detection system (IDS).

Answer(s): D



Viewing page 117 of 366
Viewing questions 581 - 585 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!