QUESTION: 205

An organization recently decided to send the backup of its customer relationship management (CRM) system to its cloud provider for recovery. Which of the following should be of GREATEST concern to an IS auditor reviewing this process?

Testing of restore data has not been performed.
Validation of backup data has not been performed.
Backups are sent and stored in unencrypted format.
The cloud provider is located in a different country.

Answer(s): C

Show Answer Next Question

QUESTION: 206

A checksum is classified as which type of control?

Preventive control
Detective control
Administrative control
Corrective control

Answer(s): B

Show Answer Next Question

QUESTION: 207

During a follow-up audit, an IS auditor finds that some critical recommendations have not been addressed as management has decided to accept the risk. Which of the following is the IS auditor's BEST course of action?

Adjust the annual risk assessment accordingly.
Require the auditee to address the recommendations in full.
Evaluate senior management's acceptance of the risk.
Update the audit program based on management's acceptance of risk.

Answer(s): C

Show Answer Next Question

QUESTION: 208

Management has asked internal audit to prioritize and perform a specialized cybersecurity audit, but the IS audit team has no experience in this area. Which of the following is the BEST course of action?

Delay the audit until the IS auditors are sufficiently trained.
Delay the audit until an experienced IS auditor has been hired.
Perform the audit as requested using third-party support.
Perform the audit with the most experienced IS auditors.

Answer(s): C

Show Answer Next Question

Free ISACA CISA Exam Braindumps (page: 53)

QUESTION: 205

QUESTION: 206

QUESTION: 207

QUESTION: 208

CISA Exam Discussions & Posts