Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 961–965 (page: 194)

Updated On: 10-Feb-2026

An IS auditor has been asked to review a recently implemented quality management system (QMS). Which of the following should be the auditor’s PRIMARY focus?

  1. Training materials prepared for coaching employees
  2. Processes to measure the performance of business-critical transactions
  3. Cost-benefit analysis of the development and implementation of the QMS
  4. Stability of the implemented QMS system over a period of time

Answer(s): B



Which of the following should be of GREATEST concern to an IS auditor assessing the effectiveness of an organization's release management processes?

  1. Release management policies have not been updated in the past two years.
  2. Identify assets to be protected.
  3. Evaluate controls in place.
  4. Identify potential threats.

Answer(s): C



An organization’s IT risk assessment should include the identification of:

  1. vulnerabilities
  2. compensating controls
  3. business process owners
  4. business needs

Answer(s): A



Which of the following should be identified FIRST during the risk assessment process?

  1. Vulnerability
  2. Existing controls
  3. Legal requirements
  4. Information assets

Answer(s): D



Which of the following is MOST important for an IS auditor to confirm when assessing the security of a new cloud-based IT application that is linked with the organization’s existing technology?

  1. The application programming interfaces (APIs) are adequately secured.
  2. The on-premise database has adequate encryption at rest.
  3. The cloud provider shares an external audit report.
  4. The organization has a flat network structure.

Answer(s): A



Viewing page 194 of 366
Viewing questions 966 - 970 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!