Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 386–390 (page: 79)

Updated On: 10-Feb-2026

Which of the following would BEST help to ensure the availability of data stored with a cloud provider?

  1. Confirming the cloud provider has a disaster recovery site
  2. Requiring the provider to conduct daily backups
  3. Defining service level agreements (SLAs) in the contract
  4. Defining the reporting process and format

Answer(s): C



Which of the following security assessment techniques attempts to exploit a system's open ports?

  1. Vulnerability scanning
  2. Penetration testing
  3. Network scanning
  4. Password cracking

Answer(s): B



Which of the following provides the MOST assurance that new information systems are ready for migration to the production environment?

  1. Approval by the change advisory board
  2. Results of end user acceptance testing (UAT)
  3. Results of penetration testing performed by the development team
  4. System quality assurance (QA) performed by an in-house team

Answer(s): B



Which of the following controls BEST ensures appropriate segregation of duties within an accounts payable department?

  1. Including the creator's user ID as a field in every transaction record created
  2. Ensuring that audit trails exist for transactions
  3. Restricting access to update programs to accounts payable staff only
  4. Restricting program functionality according to user security profiles

Answer(s): D



Which of the following reports would provide the GREATEST assurance to an IS auditor about the controls of a third party that processes critical data for the organization?

  1. Independent control assessment
  2. Black box penetration test report
  3. The third party's control self-assessment (CSA)
  4. Vulnerability scan report

Answer(s): A



Viewing page 79 of 366
Viewing questions 391 - 395 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!