Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 661–665 (page: 134)

Updated On: 10-Feb-2026

Audit frameworks can assist the IS audit function by:

  1. outlining the specific steps needed to complete audits.
  2. defining the authority and responsibility of the IS audit function.
  3. providing details on how to execute the audit program.
  4. providing direction and information regarding the performance of audits.

Answer(s): D



What is the BEST way to evaluate a control environment where the organization and a third party have shared responsibility?

  1. Conduct a control self-assessment (CSA).
  2. Review the service level agreement (SLA).
  3. Perform an onsite evaluation.
  4. Review complementary user entity controls.

Answer(s): D



Which of the following is the MAIN purpose of an information security management system?

  1. To enhance the impact of reports used to monitor information security incidents
  2. To reduce the frequency and impact of information security incidents
  3. To identify and eliminate the root causes of information security incidents
  4. To keep information security policies and procedures up-to-date

Answer(s): B



During the discussion of a draft audit report, IT management provided suitable evidence that a process has been implemented for a control that had been concluded by the IS auditor as ineffective. Which of the following is the auditor's BEST action?

  1. Explain to IT management that the new control will be evaluated during follow-up.
  2. Add comments about the action taken by IT management in the report.
  3. Change the conclusion based on evidence provided by IT management.
  4. Re-perform the audit before changing the conclusion.

Answer(s): B



An organization allows its employees to use personal mobile devices for work. Which of the following would BEST maintain information security without compromising employee privacy?

  1. Partitioning the work environment from personal space on devices
  2. Preventing users from adding applications
  3. Restricting the use of devices for personal purposes during working hours
  4. Installing security software on the devices

Answer(s): A



Viewing page 134 of 366
Viewing questions 666 - 670 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!