Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 626–630 (page: 127)

Updated On: 10-Feb-2026

An IS auditor has been asked to perform a post-implementation assessment of a new corporate human resources (HR) system. Which of the following control areas would be MOST important to review for the protection of employee information?

  1. Data retention practices
  2. Authentication mechanisms
  3. System architecture
  4. Logging capabilities

Answer(s): B



An external IS auditor has been engaged to determine the organization's cybersecurity posture. Which of the following is MOST useful for this purpose?

  1. Capability maturity assessment
  2. Compliance reports
  3. Control self-assessment (CSA)
  4. Industry benchmark report

Answer(s): A



An IS auditor observes that a business-critical application does not currently have any level of fault tolerance. Which of the following is the GREATEST concern with this situation?

  1. Degradation of services
  2. Decreased mean time between failures (MTBF)
  3. Limited tolerance for damage
  4. Single point of failure

Answer(s): D



An IS auditor is evaluating an organization's IT strategy and plans. Which of the following would be of GREATEST concern?

  1. IT is not engaged in business strategic planning.
  2. The business strategy meeting minutes are not distributed.
  3. There is inadequate documentation of IT strategic planning.
  4. There is not a defined IT security policy.

Answer(s): A



An IS auditor reviewing the threat assessment for a data center would be MOST concerned if:

  1. neighboring organizations' operations have been included.
  2. the exercise was completed by local management.
  3. all identified threats relate to external entities.
  4. some of the identified threats are unlikely to occur.

Answer(s): C



Viewing page 127 of 366
Viewing questions 631 - 635 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!