Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 621–625 (page: 126)

Updated On: 10-Feb-2026

An IS auditor has discovered that unauthorized customer management software was installed on a workstation. The auditor determines the software has been uploading customer data to an external party. Which of the following is the IS auditor's BEST course of action?

  1. Review other workstations to determine the extent of the incident.
  2. Determine the number of customer records that were uploaded.
  3. Notify the incident response team.
  4. Present the issue at the next audit progress meeting.

Answer(s): C



An IS auditor is reviewing an organization's information asset management process. Which of the following would be of GREATEST concern to the auditor?

  1. Process ownership has not been established.
  2. Identification of asset value is not included in the process.
  3. The process does not require specifying the physical locations of assets.
  4. The process does not include asset review.

Answer(s): A



An IS auditor is conducting a post-implementation review of an enterprise resource planning (ERP) system. End users indicated concerns with the accuracy of critical automatic calculations made by the system. The auditor's FIRST course of action should be to:

  1. verify completeness of user acceptance testing (UAT).
  2. verify results to determine validity of user concerns.
  3. review initial business requirements.
  4. review recent changes to the system.

Answer(s): B



An IS auditor performing an audit of backup procedures observes that backup tapes are picked up weekly and stored offsite at a third-party hosting facility. Which of the following recommendations would be the BEST way to protect the integrity of the data on the backup tapes?

  1. Ensure that data is encrypted before leaving the facility.
  2. Confirm that data transfers are logged and recorded.
  3. Confirm that data is transported in locked tamper-evident containers.
  4. Ensure that the transport company obtains signatures for all shipments.

Answer(s): A



An IS auditor has been asked to perform an assurance review of an organization's mobile computing security. To ensure the organization is able to centrally manage mobile devices to protect against data disclosure, it is MOST important for the auditor to determine whether:

  1. lost devices can be located remotely.
  2. procedures for lost devices include remote wiping of data.
  3. a mobile security awareness training program exists.
  4. a security policy exists for mobile devices.

Answer(s): D



Viewing page 126 of 366
Viewing questions 626 - 630 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!