Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 741–745 (page: 150)

Updated On: 10-Feb-2026

During a new system implementation, an IS auditor has been assigned to review risk management at each milestone. The auditor finds that several risks to project benefits have not been addressed. Who should be accountable for managing these risks?

  1. Project manager
  2. Information security officer
  3. Project sponsor
  4. Enterprise risk manager

Answer(s): C



In a post-implementation review of a recently purchased system, it is MOST important for the IS auditor to determine whether the:

  1. vendor product offered a viable solution.
  2. user requirements were met.
  3. test scenarios reflected operating activities.
  4. stakeholder expectations were identified.

Answer(s): B



Which of the following strategies BEST optimizes data storage without compromising data retention practices?

  1. Allowing employees to store large emails on flash drives
  2. Automatically deleting emails older than one year
  3. Moving emails to a virtual email vault after 30 days
  4. Limiting the size of file attachments being sent via email

Answer(s): C



Which of the following will be the MOST effective method to verify that a service vendor keeps control levels as required by the client?

  1. Obtain evidence of the vendor's control self-assessment (CSA).
  2. Periodically review the service level agreement (SLA) with the vendor.
  3. Conduct periodic on-site assessments using agreed-upon criteria.
  4. Conduct an unannounced vulnerability assessment of vendor's IT systems.

Answer(s): D



An IS auditor is reviewing the maturity of a large organization's IT governance. Which of the following BEST demonstrates that IT governance has been effectively implemented?

  1. The board reviews compliance with legal and regulatory requirements.
  2. The board monitors adherence to the organization's information security policy.
  3. The board reviews strategic IT key performance indicators (KPIs).
  4. The board approves necessary resources for IT security reviews.

Answer(s): C



Viewing page 150 of 366
Viewing questions 746 - 750 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!