Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. ISACA
  5. CISA

ISACA CISA Exam Questions
Certified Information Systems Auditor (Page 52 )

Updated On: 28-Feb-2026
Page 52 of 366
PDF with 1823 Questions

Management has decided to include a compliance manager in the approval process for a new business that may require changes to the IT infrastructure. Which of the following is the GREATEST benefit of this approach?

  1. Process accountabilities to external stakeholders are improved.
  2. Security breach incidents can be identified in early stages.
  3. Regulatory risk exposures can be identified before they materialize.
  4. Fewer reviews are needed when updating the IT compliance process.

Answer(s): C



Malicious program code was found in an application and corrected prior to release into production. After the release, the same issue was reported. Which of the following is the IS auditor's BEST recommendation?

  1. Ensure corrected program code is compiled in a dedicated server.
  2. Ensure change management reports are independently reviewed.
  3. Ensure programmers cannot access code after the completion of program edits.
  4. Ensure the business signs off on end-to-end user acceptance test (UAT) results.

Answer(s): B



For an organization that has plans to implement web-based trading, it would be MOST important for an IS auditor to verify the organization's information security plan includes:

  1. security training prior to implementation,
  2. the firewall configuration for the web server.
  3. security requirements for the new application.
  4. attributes for system passwords.

Answer(s): C



Which cloud deployment model is MOST likely to be limited in scalability?

  1. Hybrid
  2. Private
  3. Community
  4. Public

Answer(s): B



After the release of an application system, an IS auditor wants to verify that the system is providing value to the organization. The auditor's BEST course of action would be to:

  1. review the results of compliance testing.
  2. perform a gap analysis against the benefits defined in the business case.
  3. quantify improvements in client satisfaction.
  4. confirm that risk has declined since the application system release.

Answer(s): B






Post your Comments and Discuss ISACA CISA exam dumps with other Community members:

Join the CISA Discussion