support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. ISACA
  4. CISA

Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 966–970 (page: 195)

Updated On: 10-Feb-2026
Page 195 of 366
PDF with 1823 Questions

What would be the PRIMARY reason for an IS auditor to recommend using key risk indicators (KRIs)?

  1. To keep the risk register updated
  2. To eliminate unnecessary risk
  3. To determine whether risk is changing
  4. To align resources with the greatest risk

Answer(s): C



A matrix showing the current state and challenges of an organization’s software release management practices is MOST useful for:

  1. writing up an internal audit report.
  2. determining the overall maturity level.
  3. improving the developer experience.
  4. seeking approval for new tooling.

Answer(s): B



Which of the following is the BEST way to prevent social engineering incidents?

  1. Ensure user workstations are running the most recent version of antivirus software.
  2. Include security responsibilities in job descriptions and require signed acknowledgment.
  3. Maintain an onboarding and annual security awareness program.
  4. Enforce strict email security gateway controls.

Answer(s): C



Which of the following is the BEST way to reduce the attack surface for a server farm?

  1. Implement effective vulnerability management procedures.
  2. Uninstall unnecessary applications and services.
  3. Evaluate server configuration periodically.
  4. Ensure applications are periodically patched.

Answer(s): B



Which of the following is the BEST indication that an IT service desk function needs to improve its incident management processes?

  1. Information found in many incident records is incomplete
  2. The service desk spends most of its time on recurring incidents
  3. Back-end releases are the major cause of system disruptions
  4. Service level metrics for resolution time have not been met several times

Answer(s): B



  PDF
Viewing page 195 of 366
Viewing questions 971 - 975 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!