Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 946–950 (page: 191)

Updated On: 10-Feb-2026

In a review of the organization standards and guidelines for IT management, which of the following should be included in an IS development methodology?

  1. Risk management techniques
  2. Access control rules
  3. Value-added activity analysis
  4. Incident management techniques

Answer(s): A



When using data analytics to perform an audit, the IS auditor should FIRST:

  1. identify testing models
  2. define data needs
  3. identify data sources
  4. prepare the data

Answer(s): B



An organization outsourced its IS functions. To meet its responsibility for disaster recovery, the organization should:

  1. coordinate disaster recovery administration with the outsourcing vendor
  2. delegate evaluation of disaster recovery to a third party
  3. delegate evaluation of disaster recovery to internal audit
  4. discontinue maintenance of the disaster recovery plan (DRP)

Answer(s): A



Which of the following is a preventive control that can protect against internal fraud in an organization?

  1. Continuous auditing
  2. Management review
  3. External audits
  4. Segregation of duties

Answer(s): D



During a routine internal software licensing review, an IS auditor discovers instances where employees shared license keys to critical pieces of business software. Which of the following would be the auditor's BEST course of action?

  1. Recommend the utilization of software licensing monitoring tools.
  2. Recommend the purchase of additional software license keys.
  3. Validate user need for shared software licenses.
  4. Verify whether the licensing agreement allows shared use.

Answer(s): D



Viewing page 191 of 366
Viewing questions 951 - 955 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!