Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 686–690 (page: 139)

Updated On: 10-Feb-2026

An audit identified that a computer system is not assigning sequential purchase order numbers to order requests. The IS auditor is conducting an audit follow-up to determine if management has resolved this finding. Which of the following is the MOST reliable follow-up procedure?

  1. Inquire with management if the system has been configured and tested to generate sequential order numbers.
  2. Review the documentation of recent changes to implement sequential order numbering.
  3. Inspect the system settings and transaction logs to determine if sequential order numbers are generated.
  4. Examine a sample of system generated purchase orders obtained from management.

Answer(s): C



Which of the following is the BEST way to enforce the principle of least privilege on a server containing data with different security classifications?

  1. Limiting access to the data files based on frequency of use
  2. Using scripted access control lists to prevent unauthorized access to the server
  3. Obtaining formal agreement by users to comply with the data classification policy
  4. Applying access controls determined by the data owner

Answer(s): D



Which of the following is the BEST way to determine whether a test of a disaster recovery plan (DRP) was successful?

  1. Analyze whether predetermined test objectives were met.
  2. Perform testing at the backup data center.
  3. Test offsite backup files.
  4. Evaluate participation by key personnel.

Answer(s): A



If enabled within firewall rules, which of the following services would present the GREATEST risk?

  1. File transfer protocol (FTP)
  2. Simple object access protocol (SOAP)
  3. Hypertext transfer protocol (HTTP)
  4. Simple mail transfer protocol (SMTP)

Answer(s): A



Which of the following is the MOST effective way for an organization to protect against data loss?

  1. Conduct periodic security awareness training.
  2. Limit employee Internet access.
  3. Review firewall logs for anomalies.
  4. Implement data classification procedures.

Answer(s): D



Viewing page 139 of 366
Viewing questions 691 - 695 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!