Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 936–940 (page: 189)

Updated On: 10-Feb-2026

A large organization has a centralized infrastructure team and decentralized application support teams reporting into their respective business units. Which of the following is the GREATEST potential issue with his organizational structure?

  1. Redundancy of IT resources used across the organization
  2. Failure to align with industry best practices across the organization
  3. Inconsistent allocation of IT spend across the organization
  4. Inconsistent IT strategy across the organization

Answer(s): D



An IS auditor is reviewing an origination’s release management practices and observes inconsistent and inaccurate estimation of the size and complexity of business application development projects. Which of the following should the auditor recommend to address this issue?

  1. Agile development approach
  2. Critical path methodology
  3. Rapid application development
  4. Function point analysis

Answer(s): D



Which of the following is the BEST way to faster continuous improvement of IS audit processes and practices?

  1. Frequently review IS audit policies, procedures, and instruction manuals.
  2. Establish and embed quality assurance (QA) within the IS audit function.
  3. Invite external auditors and regulators to perform regular assessment of the IS audit function.
  4. Implement rigorous managerial review and sign-off of IS audit deliverables.

Answer(s): B



An IS auditor is preparing a plan for audits to be carried out over a specified period. Which of the following activities should the IS auditor perform FIRST?

  1. Allocate audit resources.
  2. Determine the audit universe.
  3. Prioritize risks.
  4. Review prior audit reports.

Answer(s): B



During a review of system access, an IS auditor notes that an employee who has recently changed roles within the organization still has previous access rights. The auditor's NEXT step should be to:

  1. recommend a control to automatically update access rights.
  2. determine the reason why access rights have not been revoked.
  3. direct management to revoke current access rights.
  4. determine if access rights are in violation of software licenses.

Answer(s): B



Viewing page 189 of 366
Viewing questions 941 - 945 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!