Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 911–915 (page: 184)

Updated On: 10-Feb-2026

Which of the following is the PRIMARY objective of implementing IT governance?

  1. Resource management
  2. Performance measurement
  3. Value delivery
  4. Strategic planning

Answer(s): C



During an information security audit of a mid-sized organization, an IS auditor notes that the organization's information security policy is not sufficient. What is the auditor's BEST recommendation for the organization?

  1. Obtain an external consultant's support to rewrite the policy.
  2. Identify and close gaps compared to a best-practice framework.
  3. Perform a benchmark with competitors’ policies.
  4. Define roles and responsibilities for regularly updating the policy.

Answer(s): B



The GREATEST limitation of a network-based intrusion detection system (IDS) is that it:

  1. provides only for active rather than passive IDS monitoring
  2. does not monitor for denial of service (DoS) attacks
  3. consumes excessive network resources for detection
  4. does not detect attacks originating on the server hosting the IDS

Answer(s): D



Which of the following is the MOST efficient solution for a multi-location healthcare organization that wants to be able to access patient data wherever patients present themselves for care?

  1. Software as a Service (SaaS) provider
  2. Network segmentation
  3. Infrastructure as a Service (IaaS) provider
  4. Dynamic localization

Answer(s): A



Which of the following would be MOST impacted if an IS auditor were to assist with the implementation of recommended control enhancements?

  1. Materiality
  2. Independence
  3. Integrity
  4. Accountability

Answer(s): B



Viewing page 184 of 366
Viewing questions 916 - 920 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!