Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 706–710 (page: 143)

Updated On: 10-Feb-2026

An externally facing system containing sensitive data is configured such that users have either read-only or administrator rights. Most users of the system have administrator access. Which of the following is the GREATEST risk associated with this situation?

  1. Users can make unauthorized changes.
  2. Users can export application logs.
  3. Users can install open-licensed software.
  4. Users can view sensitive data.

Answer(s): A



Which of the following is the GREATEST risk associated with utilizing spreadsheets for financial reporting in end-user computing (EUC)?

  1. Lack of password protection
  2. Lack of processing integrity
  3. Increase in operational incidents
  4. Increase in regulatory violations

Answer(s): B



The decision to accept an IT control risk related to data quality should be the responsibility of the:

  1. IS audit manager.
  2. chief information officer (CIO).
  3. information security team.
  4. business owner.

Answer(s): D



An organization's audit charter PRIMARILY:

  1. describes the auditor's authority to conduct audits.
  2. formally records the annual and quarterly audit plans.
  3. documents the audit process and reporting standards.
  4. defines the auditors' code of conduct.

Answer(s): A



Following a security breach in which a hacker exploited a well-known vulnerability in the domain controller, an IS auditor has been asked to conduct a control assessment. The auditor's BEST course of action would be to determine if:

  1. the patches were updated.
  2. the logs were monitored.
  3. the domain controller was classified for high availability.
  4. the network traffic was being monitored.

Answer(s): A



Viewing page 143 of 366
Viewing questions 711 - 715 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!