Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. ISACA
  5. CISA

ISACA CISA Exam Questions
Certified Information Systems Auditor (Page 53 )

Updated On: 28-Feb-2026
Page 53 of 366
PDF with 1823 Questions

A chief information officer (CIO) has asked an IS auditor to implement several security controls for an organization's IT processes and systems. The auditor should:

  1. refuse due to independence issues.
  2. communicate the conflict of interest to audit management.
  3. perform the assignment and future audits with the due professional care.
  4. obtain approval from executive management for the implementation.

Answer(s): B



An algorithm in an email program analyzes traffic to quarantine emails identified as spam. The algorithm in the program is BEST characterized as which type of control?

  1. Detective
  2. Directive
  3. Preventive
  4. Corrective

Answer(s): C



During the implementation of a new system, an IS auditor must assess whether certain automated calculations comply with the regulatory requirements. Which of the following is the BEST way to obtain this assurance?

  1. Re-perform the calculation with audit software.
  2. Review the source code related to the calculation.
  3. Review sign-off documentation.
  4. Inspect user acceptance test (UAT) results.

Answer(s): A



When testing the adequacy of tape backup procedures, which step BEST verifies that regularly scheduled backups are timely and run to completion?

  1. Reviewing a sample of system-generated backup logs
  2. Interviewing key personnel involved in the backup process
  3. Observing the execution of a daily backup run
  4. Evaluating the backup policies and procedures

Answer(s): A



During the planning stage of a compliance audit, an IS auditor discovers that a bank's inventory of compliance requirements does not include recent regulatory changes related to managing data risk. What should the auditor do FIRST?

  1. Ask management why the regulatory changes have not been included.
  2. Report the missing regulatory updates to the chief information officer (CIO).
  3. Discuss potential regulatory issues with the legal department.
  4. Exclude recent regulatory changes from the audit scope.

Answer(s): A






Post your Comments and Discuss ISACA CISA exam dumps with other Community members:

Join the CISA Discussion