Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 871–875 (page: 176)

Updated On: 10-Feb-2026

Which of the following is the MOST important factor when an organization is developing information security policies and procedures?

  1. Consultation with security staff
  2. Alignment with an information security framework
  3. Inclusion of mission and objectives
  4. Compliance with relevant regulations

Answer(s): D



What should an IS auditor review FIRST to verify that an organization’s IT strategy is effectively implemented?

  1. Information security procedures
  2. The IT governance framework
  3. Process maturity of IT general controls
  4. The most recent audit results

Answer(s): B



Which of the following is MOST important to include in an awareness program focused on information security risk?

  1. Social engineering attacks
  2. Laptop theft prevention
  3. Restricted websites
  4. Password parameters

Answer(s): A



Which of the following is a threat to IS auditor independence?

  1. Internal auditors recommend appropriate controls for systems in development
  2. Internal auditors attend IT steering committee meetings.
  3. Internal auditors design remediation plans to address control gaps identified by internal audit
  4. Internal auditors share the audit plan and control test plans with management prior to audit commencement.

Answer(s): C



Which of the following BEST supports an organization’s efforts to reduce the impact of ransomware attacks?

  1. Ensuring a payment method is available
  2. Conducting periodic internal and external penetration testing
  3. Conducting security awareness training for staff
  4. Developing robust backup and recovery procedures

Answer(s): D



Viewing page 176 of 366
Viewing questions 876 - 880 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!