Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 736–740 (page: 149)

Updated On: 10-Feb-2026

Which of the following should an IS auditor consider FIRST when evaluating firewall rules?

  1. The firewalls' default settings
  2. The physical location of the firewalls
  3. The number of remote nodes
  4. The organization's security policy

Answer(s): D



An IS auditor has discovered that a software system still in regular use is years out of date and no longer supported. The auditee has stated that it will take six months until the software is running on the current version. Which of the following is the BEST way to reduce the immediate risk associated with using an unsupported version of the software?

  1. Verify all patches have been applied to the software system's outdated version.
  2. Monitor network traffic attempting to reach the outdated software system.
  3. Close all unused ports on the outdated software system.
  4. Segregate the outdated software system from the main network.

Answer(s): D



The PRIMARY purpose of running a new system in parallel is to:

  1. validate the operation of the new system against its predecessor.
  2. determine which of the two systems is more efficient and effective.
  3. resolve any errors in the program and file interfaces.
  4. provide the basis for comprehensive unit and system testing.

Answer(s): A



During the planning phase of a data loss prevention (DLP) audit, management expresses a concern about mobile computing. Which of the following should the IS auditor identify as the associated risk?

  1. Lack of governance and oversight for IT infrastructure and applications
  2. Increased need for user awareness training
  3. The use of the cloud negatively impacting IT availability
  4. Increased vulnerability due to anytime, anywhere accessibility

Answer(s): D



An organization has recently acquired and implemented intelligent-agent software for granting loans to customers. During the post-implementation review, which of the following is the MOST important procedure for the IS auditor to perform?

  1. Review signed approvals to ensure responsibilities for decisions of the system are well defined.
  2. Review system documentation to ensure completeness.
  3. Review system and error logs to verify transaction accuracy.
  4. Review input and output control reports to verify the accuracy of the system decisions.

Answer(s): D



Viewing page 149 of 366
Viewing questions 1185 - 1192 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!