Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 861–865 (page: 174)

Updated On: 10-Feb-2026

In which of the following system development life cycle (SDLC) phases would an IS auditor expect to find that controls have been incorporated into system specifications?

  1. Design
  2. Feasibility
  3. Implementation
  4. Development

Answer(s): A



Which of the following is the GREATEST advantage of vulnerability scanning over penetration testing?

  1. The testing process can be automated to cover large groups of assets
  2. The testing produces a lower number of false positive results
  3. Custom-developed applications can be tested more accurately
  4. Network bandwidth is utilized more efficiently

Answer(s): A



A CFO has requested an audit of IT capacity management due to a series of finance system slowdowns during month-end reporting. What would be MOST important to consider before including this audit in the program?

  1. Whether the system's performance poses a significant risk to the organization
  2. Whether stakeholders are committed to assisting with the audit
  3. Whether system delays result in more frequent use of manual processing
  4. Whether internal auditors have the required skills to perform the audit

Answer(s): A



An organization has introduced a capability maturity model to the system development life cycle (SDLC) to measure improvements. Which of the following is the BEST indication of successful process improvement?

  1. Evaluation results align with defined business goals
  2. Processes demonstrate the mitigation of inherent business risk
  3. Evaluation results exceed process maturity benchmarks against competitors.
  4. Process maturity reaches the highest state of process optimization

Answer(s): A



Which of the following is a concern associated with virtualization?

  1. One host may have multiple versions of the same operating system
  2. Performance issues with the host could impact the guest operating systems
  3. The physical footprint of servers could decrease within the data center
  4. Processing capacity may be shared across multiple operating systems

Answer(s): B



Viewing page 174 of 366
Viewing questions 866 - 870 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!