Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 681–685 (page: 138)

Updated On: 10-Feb-2026

An IS auditor is reviewing the release management process for an in-house software development solution. In which environment is the software version MOST likely to be the same as production?

  1. Development
  2. Staging
  3. Testing
  4. Integration

Answer(s): B



Which of the following would BEST help to ensure that potential security issues are considered by the development team as part of incremental changes to agile- developed software?

  1. Deploy changes in a controlled environment and observe for security defects.
  2. Mandate that the change analyses are documented in a standard format.
  3. Assign the security risk analysis to a specially trained member of the project management office.
  4. Include a mandatory step to analyze the security impact when making changes.

Answer(s): D



The waterfall life cycle model of software development is BEST suited for which of the following situations?

  1. The project will involve the use of new technology.
  2. The project intends to apply an object-oriented design approach.
  3. The project is subject to time pressures.
  4. The project requirements are well understood.

Answer(s): D



Which of the following is the GREATEST impact as a result of the ongoing deterioration of a detective control?

  1. Increased number of false negatives in security logs
  2. Decreased effectiveness of root cause analysis
  3. Decreased overall recovery time
  4. Increased demand for storage space for logs

Answer(s): A



A proper audit trail of changes to server start-up procedures would include evidence of:

  1. program execution.
  2. operator overrides.
  3. subsystem structure.
  4. security control options.

Answer(s): B



Viewing page 138 of 366
Viewing questions 686 - 690 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!