Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 811–815 (page: 164)

Updated On: 10-Feb-2026

An organization is modernizing its technology policy framework to demonstrate compliance with external industry standards. Which of the following would be MOST useful to an IS auditor for validating the outcome?

  1. Mapping of relevant standards against the organization's controls
  2. Inventory of the organization's approved policy exceptions
  3. Policy recommendations from a leading external consulting agency
  4. Benchmarking of internal standards against peer organizations

Answer(s): A



Which of the following system implementation approaches allows for the LONGEST overlap period between the old and new systems?

  1. Phased
  2. Modular
  3. Pilot
  4. Parallel

Answer(s): D



Which of the following provides the BEST assurance that a new process for purging transactions does not have a detrimental impact on the integrity of the database?

  1. Reviewing the entity relationship diagram of the database
  2. Reviewing results of the process in a test environment
  3. Assessing the design of triggers
  4. Analyzing the database structure

Answer(s): B



The MOST critical security weakness of a packet level firewall is that it can be circumvented by:

  1. deciphering the signature information of the packets
  2. using a dictionary attack of encrypted passwords
  3. intercepting packets and viewing passwords sent in clear text
  4. changing the source address on incoming packets

Answer(s): D



Which of the following should be the FIRST step when conducting an IT risk assessment?

  1. Assess vulnerabilities
  2. Evaluate controls in place
  3. Identify assets to be protected
  4. Identify potential threats

Answer(s): C



Viewing page 164 of 366
Viewing questions 816 - 820 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!