support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. ISACA
  4. CISA

Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 366–370 (page: 75)

Updated On: 10-Feb-2026
Page 75 of 366
PDF with 1823 Questions

Which of the following should be of GREATEST concern for an IS auditor reviewing an organization's bring your own device (BYOD) policy?

  1. Not all devices are approved for BYOD.
  2. The policy does not include the right to audit BYOD devices.
  3. A mobile device management (MDM) solution is not implemented.
  4. The policy is not updated annually.

Answer(s): B



Which of the following statements appearing in an organization's acceptable use policy BEST demonstrates alignment with data classification standards related to the protection of information assets?

  1. Information assets should only be accessed by persons with a justified need.
  2. All information assets must be encrypted when stored on the organization's systems.
  3. Any information assets transmitted over a public network must be approved by executive management.
  4. All information assets will be assigned a clearly defined level to facilitate proper employee handling.

Answer(s): D



Which of the following information security requirements BEST enables the tracking of organizational data in a bring your own device (BYOD) environment?

  1. Employees must immediately report lost or stolen mobile devices containing organizational data.
  2. Employees must use auto-lock features and complex passwords on personal devices.
  3. Employees must sign acknowledgment of the organization's mobile device acceptable use policy.
  4. Employees must enroll their personal devices in the organization's mobile device management program.

Answer(s): A



Which of the following is MOST important for an IS auditor to verify when evaluating an organization's firewall?

  1. Logs are being collected in a separate protected host.
  2. Access to configuration files is restricted.
  3. Automated alerts are being sent when a risk is detected.
  4. Insider attacks are being controlled

Answer(s): B



Which of the following would be of GREATEST concern to an IS auditor reviewing backup and recovery controls?

  1. Backup procedures are not documented.
  2. Weekly and monthly backups are stored onsite.
  3. Backups are stored in an external hard drive.
  4. Restores from backups are not periodically tested.

Answer(s): D



  PDF
Viewing page 75 of 366
Viewing questions 371 - 375 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!