Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 691–695 (page: 140)

Updated On: 10-Feb-2026

Which of the following is the BEST control to minimize the risk of unauthorized access to lost company-owned mobile devices?

  1. Device encryption
  2. Device tracking software
  3. Password/PIN protection
  4. Periodic backup

Answer(s): A



In a RACI model, which of the following roles must be assigned to only one individual?

  1. Responsible
  2. Accountable
  3. Informed
  4. Consulted

Answer(s): B



An IS auditor has found that a vendor has gone out of business and the escrow has an older version of the source code. What is the auditor's BEST recommendation for the organization?

  1. Perform an analysis to determine the business risk.
  2. Develop a maintenance plan to support the application using the existing code.
  3. Bring the escrow version up to date.
  4. Analyze a new application that meets the current requirements.

Answer(s): A



An IS auditor is reviewing the installation of a new server. The IS auditor's PRIMARY objective is to ensure that:

  1. security parameters are set in accordance with the manufacturer's standards.
  2. security parameters are set in accordance with the organization's policies.
  3. a detailed business case was formally approved prior to the purchase.
  4. the procurement project invited tenders from at least three different suppliers.

Answer(s): B



An IS auditor finds a high-risk vulnerability in a public-facing web server used to process online customer payments. The IS auditor should FIRST:

  1. notify the audit committee.
  2. review security incident reports.
  3. identify compensating controls.
  4. document the exception in an audit report.

Answer(s): C



Viewing page 140 of 366
Viewing questions 696 - 700 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!