Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. ISACA
  5. CISA

ISACA CISA Exam Questions
Certified Information Systems Auditor (Page 20 )

Updated On: 24-Feb-2026
Page 20 of 366
PDF with 1823 Questions

Which of the following is MOST important for an IS auditor to confirm when reviewing an organization's plans to implement robotic process automation (RPA) to automate routine business tasks?

  1. A benchmarking exercise of industry peers who use RPA has been completed.
  2. The end-to-end process is understood and documented.
  3. A request for proposal (RFP) has been issued to qualified vendors.
  4. Roles and responsibilities are defined for the business processes in scope.

Answer(s): B



Which of the following BEST facilitates the legal process in the event of an incident?

  1. Right to perform e-discovery
  2. Preserving the chain of custody
  3. Results of a root cause analysis
  4. Advice from legal counsel

Answer(s): B



Cross-site scripting (XSS) attacks are BEST prevented through:

  1. secure coding practices.
  2. use of common industry frameworks.
  3. a three-tier web architecture.
  4. application firewall policy settings.

Answer(s): A



Prior to a follow-up engagement, an IS auditor learns that management has decided to accept a level of residual risk related to an audit finding without remediation. The IS auditor is concerned about management's decision. Which of the following should be the IS auditor's NEXT course of action?

  1. Present the issue to executive management.
  2. Report the disagreement to the board.
  3. Accept management's decision and continue the follow-up.
  4. Report the issue to IS audit management.

Answer(s): D



An IS auditor observes that a bank's web page address is prefixed "https://". The auditor would be correct to conclude that:

  1. the bank has established a virtual private network (VPN).
  2. transactions are encrypted.
  3. the bank has a restricted Internet protocol (IP) address.
  4. the customer is connected to the bank's intranet.

Answer(s): B






Post your Comments and Discuss ISACA CISA exam dumps with other Community members:

Join the CISA Discussion