Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 446–450 (page: 91)

Updated On: 10-Feb-2026

Which of the following applications has the MOST inherent risk and should be prioritized during audit planning?

  1. An internally developed application
  2. An onsite application that is unsupported
  3. A decommissioned legacy application
  4. An outsourced accounting application

Answer(s): A



Which of the following BEST enables an organization to quantify acceptable data loss in the event of a disaster?

  1. Recovery time objective (RTO)
  2. Recovery point objective (RPO)
  3. Availability of backup software
  4. Mean time to recover (MTTR)

Answer(s): B



Which of the following is the BEST compensating control when segregation of duties is lacking in a small IS department?

  1. Transaction log review
  2. Background checks
  3. Mandatory holidays
  4. User awareness training

Answer(s): A



Which of the following would be the MOST useful metric for management to consider when reviewing a project portfolio?

  1. Cost of projects divided by total IT cost
  2. Net present value (NPV) of the portfolio
  3. Total cost of each project
  4. Expected return divided by total project cost

Answer(s): D



Which of the following would BEST detect that a distributed denial of service (DDoS) attack is occurring?

  1. Server crashes
  2. Customer service complaints
  3. Penetration testing
  4. Automated monitoring of logs

Answer(s): D



Viewing page 91 of 366
Viewing questions 451 - 455 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!