Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 836–840 (page: 169)

Updated On: 10-Feb-2026

An IS auditor notes that a mortgage origination team receives customer loan applications via a shared repository. Which of the following findings presents the GREATEST privacy risk for this process?

  1. Shared repository lacks dual access controls
  2. Customer data is not updated in the origination system
  3. Loan documentation is not purged from the system
  4. Duplicate loan applications are not flagged for attention

Answer(s): A



An IS auditor previously worked in an organization’s IT department and was involved with the design of the business continuity plan (BCP). The IS auditor has now been asked to review this same BCP. What should the auditor do FIRST?

  1. Document the conflict in the audit report.
  2. Report the conflict of interest to the chief compliance officer.
  3. Communicate the conflict of interest to the audit manager.
  4. Decline the audit assignment.

Answer(s): C



Which of the following is MOST important when evaluating the design effectiveness of multi-factor authentication?

  1. Reviewing the physical controls related to the storage of the hardware tokens
  2. Ensuring segregation is maintained by storing the two factors in separate databases
  3. Determining the identification process for each factor and ensuring they are synchronized
  4. Evaluating whether false rejection and false acceptance rates have been adequately defined

Answer(s): C



Which of the following technologies has the SMALLEST maximum range for data transmission between devices?

  1. Wi-Fi
  2. Bluetooth
  3. Long-term evolution (LTE)
  4. Near-field communication (NFC)

Answer(s): D



Which of the following is the BEST way for management to ensure the effectiveness of the cybersecurity incident response process?

  1. Periodic tabletop exercises involving key stakeholders
  2. Periodic update of incident response process documentation
  3. Periodic cybersecurity training for staff involved in incident response
  4. Periodic reporting of cybersecurity incidents to key stakeholders

Answer(s): A



Viewing page 169 of 366
Viewing questions 841 - 845 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!