Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 586–590 (page: 119)

Updated On: 10-Feb-2026

An IS audit manager is preparing the staffing plan for an audit engagement of a cloud service provider. What should be the manager's PRIMARY concern when made aware that a new auditor in the department previously worked for this provider?

  1. Professional conduct
  2. Competency
  3. Integrity
  4. Independence

Answer(s): D



An IS auditor discovers that validation controls in a web application have been moved from the server side into the browser to boost performance. This would
MOST likely increase the risk of a successful attack by:

  1. denial of service (DoS).
  2. phishing.
  3. structured query language (SQL) injection.
  4. buffer overflow.

Answer(s): C



An IS auditor notes that application super-user activity was not recorded in system logs. What is the auditor's BEST course of action?

  1. Investigate the reason for the lack of logging.
  2. Report the issue to the audit manager.
  3. Recommend activation of super-user activity logging.
  4. Recommend a least-privilege access model.

Answer(s): C



An IS auditor is reviewing security controls related to collaboration tools for a business unit responsible for intellectual property and patents. Which of the following observations should be of MOST concern to the auditor?

  1. Training was not provided to the department that handles intellectual property and patents.
  2. Logging and monitoring for content filtering is not enabled.
  3. The collaboration tool is hosted and can only be accessed via an Internet browser.
  4. Employees can share files with users outside the company through collaboration tools.

Answer(s): D



An IS auditor has been asked to assess the security of a recently migrated database system that contains personal and financial data for a bank's customers.
Which of the following controls is MOST important for the auditor to confirm it in place?

  1. The default configurations have been changed.
  2. All tables in the database are normalized.
  3. The service port used by the database server has been changed.
  4. The default administration account is used after changing the account password.

Answer(s): A



Viewing page 119 of 366
Viewing questions 591 - 595 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!