An IS auditor reviewing the database controls for a new e-commerce system discovers a security weakness in the database configuration. Which of the following should be the IS auditor's NEXT course of action?
Answer(s): B
An IS auditor finds that a recently deployed application has a number of developers with inappropriate update access left over from the testing environment. Which of the following would have BEST prevented the update access from being migrated?
Answer(s): A
An IS auditor is asked to review a large organization's change management process. Which of the following practices presents the GREATEST risk?
Answer(s): D
An IS auditor is evaluating the security of an organization's data backup process, which includes the transmission of daily incremental backups to a public cloud provider. Which of the following findings poses the GREATEST risk to the organization?
Answer(s): C
An IS auditor performing an application development review attends development team meetings. The IS auditor's independence will be compromised if the IS auditor:
Post your Comments and Discuss ISACA CISA exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISA content, but please register or login to continue.