Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 841–845 (page: 170)

Updated On: 10-Feb-2026

When reviewing a project to replace multiple manual data entry systems with an artificial intelligence (Al) system, the IS auditor should be MOST concerned with the impact Al will have on:

  1. future task updates.
  2. enterprise architecture (EA).
  3. task capacity output
  4. employee retention

Answer(s): B



Which of the following is a core functionality of a configuration and release management system?

  1. Identifying other configuration items that will be impacted by a given change
  2. Identifying vulnerabilities in configuration settings
  3. Deploying a configuration change to the sandbox environment
  4. Managing privileged access to databases, servers, and infrastructure

Answer(s): A



In an annual audit cycle, the audit of an organization's IT department resulted in many findings. Which of the following would be the MOST important consideration when planning the next audit?

  1. Limiting the review to the deficient areas
  2. Following up on the status of all recommendations
  3. Verifying that all recommendations have been implemented
  4. Postponing the review until all of the findings have been rectified

Answer(s): B



An IS auditor finds ad hoc vulnerability scanning is in place with no clear alignment to the organization's wider security threat and vulnerability management program. Which of the following would BEST enable the organization to work toward improvement in this area?

  1. Outsourcing the threat and vulnerability management function to a third party
  2. Maintaining a catalog of vulnerabilities that may impact mission-critical systems
  3. Using a capability maturity model to identify a path to an optimized program
  4. Implementing security logging to enhance threat and vulnerability management

Answer(s): C



Which of the following will BEST help detect software licensing issues in a networked environment where all software is purchased and loaded by IT?

  1. Comparing the software on each machine to the listing of software purchased
  2. Comparing the number of individual software instances installed to the license inventory
  3. Reviewing listings of software on each machine for known versions of unlicensed software
  4. Reviewing reports demonstrating that metering software is not being used to access per-seat software

Answer(s): B



Viewing page 170 of 366
Viewing questions 846 - 850 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!