Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 716–720 (page: 145)

Updated On: 10-Feb-2026

An organization has virtualized its server environment without making any other changes to the network or security infrastructure. Which of the following is the
MOST significant risk?

  1. Data center environmental controls not aligning with new configuration
  2. System documentation not being updated to reflect changes in the environment
  3. Vulnerability in the virtualization platform affecting multiple hosts
  4. Inability of the network intrusion detection system (IDS) to monitor virtual server-to-server communications.

Answer(s): C



During an audit of an organization's risk management practices, an IS auditor finds several documented IT risk acceptances have not been renewed in a timely manner after the assigned expiration date. When assessing the severity of this finding, which mitigating factor would MOST significantly minimize the associated impact?

  1. There are documented compensating controls over the business processes.
  2. The risk acceptances with issues reflect a small percentage of the total population.
  3. The business environment has not significantly changed since the risk acceptances were approved.
  4. The risk acceptances were previously reviewed and approved by appropriate senior management.

Answer(s): C



Which of the following is MOST important for an IS auditor to consider when performing the risk assessment prior to an audit engagement?

  1. Industry standards and best practices
  2. The amount of time since the previous audit
  3. The results of the previous audit
  4. The design of controls

Answer(s): C



An IS auditor is reviewing the deployment of a new automated system. Which of the following findings presents the MOST significant risk?

  1. Users have not been trained on the new system.
  2. The new system is not platform agnostic.
  3. Data from the legacy system is not migrated correctly to the new system.
  4. The new system has resulted in layoffs of key experienced personnel.

Answer(s): C



Which of the following is an executive management concern that could be addressed by the implementation of a security metrics dashboard?

  1. Effectiveness of the security program
  2. Total number of false positives
  3. Total number of hours budgeted to security
  4. Security incidents vs. industry benchmarks

Answer(s): A



Viewing page 145 of 366
Viewing questions 721 - 725 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!