Certified Information Systems Auditor CISA Exam Dumps

1. An IT balanced scorecard is the MOST effective means of monitoring:

2. When reviewing an organization's information security policies, an IS auditor should verify that the policies have been defined PRIMARILY on the basis of:

3. Which of the following would be an IS auditor's GREATEST concern when reviewing the early stages of a software development project?

4. Which of the following is the BEST data integrity check?

5. Spreadsheets are used to calculate project cost estimates. Totals for each cost category are then keyed into the job-costing system.

What is the BEST control to ensure that data is accurately entered into the system?

6. An incorrect version of the source code was amended by a development team. This MOST likely indicates a weakness in:

7. An organizations audit charier PRIMARILY:

8. The decision to accept an IT control risk related to data quality should be the responsibility of the:

9. Which of the following data would be used when performing a business impact analysis (BIA)?

10. Which of the following is the MOST important consideration for an IS auditor when assessing the adequacy of an organization's information security policy?

11. During the evaluation of controls over a major application development project, the MOST effective use of an IS auditor's time would be to review and evaluate:

12. An IS auditor finds that firewalls are outdated and not supported by vendors.

Which of the following should be the auditor's NEXT course of action?

13. Which of the following is the BEST way to determine whether a test of a disaster recovery plan (DRP) was successful?

14. An IS auditor found that a company executive is encouraging employee use of social networking sites for business purposes.

Which of the following recommendations would BEST help to reduce the risk of data leakage?

15. An IS auditor notes that several employees are spending an excessive amount of time using social media sites for personal reasons.

Which of the following should the auditor recommend be performed FIRST?

16. Which of the following fire suppression systems needs to be combined with an automatic switch to shut down the electricity supply in the event of activation?

17. Which of the following would MOST likely impair the independence of the IS auditor when performing a post-implementation review of an application system?

18. An organization plans to receive an automated data feed into its enterprise data warehouse from a third-party service provider.

Which of the following would be the BEST way to prevent accepting bad data?

19. An IS auditor suspects an organization's computer may have been used to commit a crime.

Which of the following is the auditor's BEST course of action?

20. Which of the following access rights presents the GREATEST risk when granted to a new member of the system development staff?

21. An IS auditor is conducting a post-implementation review of an enterprise resource planning (ERP) system. End users indicated concerns with the accuracy of critical automatic calculations made by the system.

The auditor's FIRST course of action should be to:

22. Which of the following provides the MOST reliable audit evidence on the validity of transactions in a financial application?

23. During an incident management audit, an IS auditor finds that several similar incidents were logged during the audit period.

Which of the following is the auditor's MOST important course of action?

24. During an external review, an IS auditor observes an inconsistent approach in classifying system criticality within the organization.

Which of the following should be recommended as the PRIMARY factor to determine system criticality?

25. An IS auditor discovers an option in a database that allows the administrator to directly modify any table. This option is necessary to overcome bugs in the software, but is rarely used. Changes to tables are automatically logged.

The IS auditor's FIRST action should be to:

26. An IS auditor finds that a key Internet-facing system is vulnerable to attack and that patches are not available.

What should the auditor recommend be done FIRST?

27. IS management has recently disabled certain referential integrity controls in the database management system (DBMS) software to provide users increased query performance.

Which of the following controls will MOST effectively compensate for the lack of referential integrity?

28. A system administrator recently informed the IS auditor about the occurrence of several unsuccessful intrusion attempts from outside the organization.

Which of the following is MOST effective in detecting such an intrusion?

29. The PRIMARY advantage of object-oriented technology is enhanced:

30. From an IS auditor's perspective, which of the following would be the GREATEST risk associated with an incomplete inventory of deployed software in an organization?

31. Which of the following BEST minimizes performance degradation of servers used to authenticate users of an e-commerce website?

32. During an audit of a reciprocal disaster recovery agreement between two companies, the IS auditor would be MOST concerned with the:

33. Which of the following attack techniques will succeed because of an inherent security weakness in an Internet firewall?

34. Which of the following is an executive management concern that could be addressed by the implementation of a security metrics dashboard?

35. One benefit of return on investment (ROI) analysts in IT decision making is that it provides the:

36. Which of the following is an audit reviewer's PRIMARY role with regard to evidence?

37. Which of the following is the MOST important benefit of involving IS audit when implementing governance of enterprise IT?

38. Which of the following is MOST important for an effective control self-assessment (CSA) program?

39. What should be the PRIMARY basis for selecting which IS audits to perform in the coming year?

40. Which of the following is the MOST important prerequisite for the protection of physical information assets in a data center?

41. A proper audit trail of changes to server start-up procedures would include evidence of:

42. Which of the following would be a result of utilizing a top-down maturity model process?

43. Which audit approach is MOST helpful in optimizing the use of IS audit resources?

44. Which of the following is the MOST effective control to mitigate unintentional misuse of authorized access?

45. Which of the following BEST guards against the risk of attack by hackers?

46. A system development project is experiencing delays due to ongoing staff shortages.

Which of the following strategies would provide the GREATEST assurance of system quality at implementation?

47. Which of the following should be done FIRST when planning a penetration test?

48. Due to limited storage capacity, an organization has decided to reduce the actual retention period for media containing completed low-value transactions.

Which of the following is MOST important for the organization to ensure?

49. During the implementation of an upgraded enterprise resource planning (ERP) system, which of the following is the MOST important consideration for a go-live decision?

50. Which of the following is MOST useful for determining whether the goals of IT are aligned with the organization's goals?

51. During a disaster recovery audit, an IS auditor finds that a business impact analysis (BIA) has not been performed. The auditor should FIRST

52. Which of the following is the MOST effective control for protecting the confidentiality and integrity of data stored unencrypted on virtual machines?

53. An IS auditor is examining a front-end subledger and a main ledger.

Which of the following would be the GREATEST concern if there are flaws in the mapping of accounts between the two systems?

54. What is MOST important to verify during an external assessment of network vulnerability?

55. A data breach has occurred due lo malware.

Which of the following should be the FIRST course of action?

56. Which of the following should an IS auditor be MOST concerned with during a post-implementation review?

57. Which of the following would BEST demonstrate that an effective disaster recovery plan (DRP) is in place?

58. Which of the following is the BEST way to mitigate the impact of ransomware attacks?

59. Malicious program code was found in an application and corrected prior to release into production. After the release, the same issue was reported.

Which of the following is the IS auditor's BEST recommendation?

60. Documentation of workaround processes to keep a business function operational during recovery of IT systems is a core part of a:

61. Which of the following strategies BEST optimizes data storage without compromising data retention practices?

62. Which of the following should an IS auditor recommend as a PRIMARY area of focus when an organization decides to outsource technical support for its external customers?

63. To confirm integrity for a hashed message, the receiver should use:

64. Which of the following is MOST important to ensure when planning a black box penetration test?

65. Which of the following is the BEST method to safeguard data on an organization's laptop computers?

66. An IS auditor is planning an audit of an organization's accounts payable processes.

Which of the following controls is MOST important to assess in the audit?

67. When evaluating the design of controls related to network monitoring, which of the following is MOST important for an IS auditor to review?

68. An organization has recently acquired and implemented intelligent-agent software for granting loans to customers.

During the post-implementation review, which of the following is the MOST important procedure for the IS auditor to perform?

69. What is the BEST control to address SQL injection vulnerabilities?

70. An online retailer is receiving customer complaints about receiving different items from what they ordered on the organization's website. The root cause has been traced to poor data quality. Despite efforts to clean erroneous data from the system, multiple data quality issues continue to occur.

Which of the following recommendations would be the BEST way to reduce the likelihood of future occurrences?

71. Which of the following components of a risk assessment is MOST helpful to management in determining the level of risk mitigation to apply?

72. Which of the following would BEST facilitate the successful implementation of an IT-related framework?

73. During a review of a production schedule, an IS auditor observes that a staff member is not complying with mandatory operational procedures.

The auditor's NEXT step should be to:

74. Which of the following is the PRIMARY advantage of parallel processing for a new system implementation?

75. An IS auditor finds the log management system is overwhelmed with false positive alerts.

The auditor's BEST recommendation would be to:

76. Which of the following should be the MOST important consideration when conducting a review of IT portfolio management?

77. Which of the following should be the PRIMARY basis for prioritizing follow-up audits?

78. Which of the following is the BEST control to prevent the transfer of files to external parties through instant messaging (IM) applications?

79. Which of the following is the BEST control to mitigate the malware risk associated with an instant messaging (IM) system?

80. Which of the following should be an IS auditor's PRIMARY focus when developing a risk-based IS audit program?

81. Cross-site scripting (XSS) attacks are BEST prevented through:

82. When determining whether a project in the design phase will meet organizational objectives, what is BEST to compare against the business case?

83. An organization has outsourced its data processing function to a service provider.

Which of the following would BEST determine whether the service provider continues to meet the organization s objectives?

84. When implementing Internet Protocol security (IPsec) architecture, the servers involved in application delivery:

85. Coding standards provide which of the following?

86. Prior to a follow-up engagement, an IS auditor learns that management has decided to accept a level of residual risk related to an audit finding without remediation. The IS auditor is concerned about management's decision.

Which of the following should be the IS auditor's NEXT course of action?

87. The PRIMARY benefit lo using a dry-pipe fire-suppression system rather than a wet-pipe system is that a dry-pipe system:

88. Which of the following is MOST important with regard to an application development acceptance test?

89. An organization's enterprise architecture (EA) department decides to change a legacy system's components while maintaining its original functionality.

Which of the following is MOST important for an IS auditor to understand when reviewing this decision?

90. An IS auditor is evaluating an organization's IT strategy and plans.

Which of the following would be of GREATEST concern?

91. When an IS audit reveals that a firewall was unable to recognize a number of attack attempts, the auditor's BEST recommendation is to place an intrusion detection system (IDS) between the firewall and:

92. An IS auditor is reviewing an organization's information asset management process.

Which of the following would be of GREATEST concern to the auditor?

93. An IS audit reveals that an organization is not proactively addressing known vulnerabilities.

Which of the following should the IS auditor recommend the organization do FIRST?

94. Which of the following is the BEST way to address segregation of duties issues in an organization with budget constraints?

95. An organization's security policy mandates that all new employees must receive appropriate security awareness training.

Which of the following metrics would BEST assure compliance with this policy?

96. An IS auditor is following up on prior period items and finds management did not address an audit finding.

Which of the following should be the IS auditor's NEXT course of action?

97. Which of the following tests would provide the BEST assurance that a health care organization is handling patient data appropriately?

98. An organization allows employees to retain confidential data on personal mobile devices.

Which of the following is the BEST recommendation to mitigate the risk of data leakage from lost or stolen devices?

99. Which of the following demonstrates the use of data analytics for a loan origination process?

100. Which of the following BEST indicates the effectiveness of an organization's risk management program?

101. An IS auditor has been asked to assess the security of a recently migrated database system that contains personal and financial data for a bank's customers.

Which of the following controls is MOST important for the auditor to confirm is in place?

102. Which of the following is the BEST justification for deferring remediation testing until the next audit?

103. What is BEST for an IS auditor to review when assessing the effectiveness of changes recently made to processes and tools related to an organization's business continuity plan (BCP)?

104. During a follow-up audit, an IS auditor learns that some key management personnel have been replaced since the original audit, and current management has decided not to implement some previously accepted recommendations.

What is the auditor's BEST course of action?

105. Which of the following is the BEST compensating control when segregation of duties is lacking in a small IS department?

106. Which of the following would BEST determine whether a post-implementation review (PIR)

performed by the project management office (PMO) was effective?

107. Which of the following is MOST important for an IS auditor to examine when reviewing an organization's privacy policy?

108. Which of the following is the GREATEST concern associated with a high number of IT policy exceptions approved by management?

109. During a new system implementation, an IS auditor has been assigned to review risk management at each milestone. The auditor finds that several risks to project benefits have not been addressed.

Who should be accountable for managing these risks?

110. Which of the following will be the MOST effective method to verify that a service vendor keeps control levels as required by the client?

111. While executing follow-up activities, an IS auditor is concerned that management has implemented corrective actions that are different from those originally discussed and agreed with the audit function.

In order to resolve the situation, the IS auditor's BEST course of action would be to:

112. During an ongoing audit, management requests a briefing on the findings to date.

Which of the following is the IS auditor's BEST course of action?

113. Which of the following is the PRIMARY concern when negotiating a contract for a hot site?

114. Which of the following is MOST important for an IS auditor to review when evaluating the accuracy of a spreadsheet that contains several macros?

115. Which of the following is the BEST recommendation to prevent fraudulent electronic funds transfers by accounts payable employees?

116. A new regulation requires organizations to report significant security incidents to the regulator within 24 hours of identification.

Which of the following is the IS auditor's BEST recommendation to facilitate compliance with the regulation?

117. An IS auditor has found that an organization is unable to add new servers on demand in a cost-efficient manner.

Which of the following is the auditor's BEST recommendation?

118. An IS auditor who was instrumental in designing an application is called upon to review the application.

The auditor should:

119. Which of the following is the BEST method to prevent wire transfer fraud by bank employees?

120. In a small IT web development company where developers must have write access to production, the BEST recommendation of an IS auditor would be to:

121. Which of the following is the PRIMARY reason for an IS auditor to conduct post-implementation reviews?

122. In a 24/7 processing environment, a database contains several privileged application accounts with passwords set to never expire.

Which of the following recommendations would BEST address the risk with minimal disruption to the business?

123. Management is concerned about sensitive information being intentionally or unintentionally emailed as attachments outside the organization by employees.

What is the MOST important task before implementing any associated email controls?

124. An IS auditor will be testing accounts payable controls by performing data analytics on the entire population of transactions.

Which of the following is MOST important for the auditor to confirm when sourcing the population data?

125. Which of the following is the BEST source of information for assessing the effectiveness of IT process monitoring?

126. Which of the following is the MOST effective way to maintain network integrity when using mobile devices?

127. An IS auditor wants to determine who has oversight of staff performing a specific task and is referencing the organization's RACI chart.

Which of the following roles within the chart would provide this information?

128. Which of the following is the BEST detective control for a job scheduling process involving data transmission?

129. Which of the following should be an IS auditor's GREATEST consideration when scheduling follow-up activities for agreed-upon management responses to remediate audit observations?

130. An IS auditor notes the transaction processing times in an order processing system have significantly increased after a major release.

Which of the following should the IS auditor review FIRST?

131. Secure code reviews as part of a continuous deployment program are which type of control?

132. An organization's software developers need access to personally identifiable information (Pll) stored in a particular data format.

Which of the following is the BEST way to protect this sensitive information while allowing the developers to use it in development and test environments?

133. Which of the following is MOST important to include in forensic data collection and preservation procedures?

134. Which of the following is a social engineering attack method?

135. When an intrusion into an organization network is deleted, which of the following should be done FIRST?

136. Which of the following should be GREATEST concern to an IS auditor reviewing data conversion and migration during the implementation of a new application system?

137. Which of the following documents would be MOST useful in detecting a weakness in segregation of duties?

138. Which of the following would be to MOST concern when determine if information assets are adequately safequately safeguarded during transport and disposal?

139. During the design phase of a software development project, the PRIMARY responsibility of an IS auditor is to evaluate the:

140. Which of the following is the MOST important reason to implement version control for an end-user computing (EUC) application?

141. Which of the following is the MOST effective way for an organization to project against data loss?

142. Management has requested a post-implementation review of a newly implemented purchasing package to determine to what extent business requirements are being met.

Which of the following is MOST likely to be assessed?

143. The implementation of an IT governance framework requires that the board of directors of an organization:

144. When auditing the security architecture of an online application, an IS auditor should FIRST review the:

145. An organization conducted an exercise to test the security awareness level of users by sending an email offering a cash reward 10 those who click on a link embedded in the body of the email.

Which of the following metrics BEST indicates the effectiveness of awareness training?

146. An IS auditor discovers that validation controls m a web application have been moved from the server side into the browser to boost performance. This would MOST likely increase the risk of a successful attack by.

147. Which of the following BEST ensures the quality and integrity of test procedures used in audit analytics?

148. During the discussion of a draft audit report. IT management provided suitable evidence fiat a process has been implemented for a control that had been concluded by the IS auditor as Ineffective.

Which of the following is the auditor's BEST action?

149. Which of the following MOST effectively minimizes downtime during system conversions?

150. Which of the following activities provides an IS auditor with the MOST insight regarding potential single person dependencies that might exist within the organization?

151. Which of the following BEST Indicates that an incident management process is effective?

152. Which of the following is an example of a preventative control in an accounts payable system?

153. An IS auditor concludes that an organization has a quality security policy.

Which of the following is MOST important to determine next? The policy must be:

154. An organization has recently implemented a Voice-over IP (VoIP) communication system.

Which ot the following should be the IS auditor's PRIMARY concern?

155. Which of the following is a detective control?

156. Which of the following BEST demonstrates that IT strategy Is aligned with organizational goals and objectives?

157. When testing the adequacy of tape backup procedures, which step BEST verifies that regularly scheduled Backups are timely and run to completion?

158. Which of the following observations would an IS auditor consider the GREATEST risk when conducting an audit of a virtual server farm tor potential software vulnerabilities?

159. To develop meaningful recommendations 'or findings, which of the following is MOST important 'or an IS auditor to determine and understand?

160. An IS auditor notes that IT and the business have different opinions on the availability of their application servers.

Which of the following should the IS auditor review FIRST in order to understand the problem?

161. During an audit of a financial application, it was determined that many terminated users' accounts were not disabled.

Which of the following should be the IS auditor's NEXT step?

162. An organization is considering allowing users to connect personal devices to the corporate network.

Which of the following should be done FIRST?

163. An organization is planning an acquisition and has engaged an IS auditor lo evaluate the IT governance framework of the target company.

Which of the following would be MOST helpful In determining the effectiveness of the framework?

164. An IS auditor has been asked to audit the proposed acquisition of new computer hardware.

The auditor’s PRIMARY concern Is that:

165. During the implementation of a new system, an IS auditor must assess whether certain automated

calculations comply with the regulatory requirements.

Which of the following is the BEST way to obtain this assurance?

166. An organization has developed mature risk management practices that are followed across all departments.

What is the MOST effective way for the audit team to leverage this risk management maturity?

167. During an exit interview, senior management disagrees with some of me facts presented m the draft audit report and wants them removed from the report.

Which of the following would be the auditor's BEST course of action?

168. Which of the following is the BEST source of information tor an IS auditor to use when determining whether an organization's information security policy is adequate?

169. Following a security breach in which a hacker exploited a well-known vulnerability in the domain controller, an IS audit has been asked to conduct a control assessment. the auditor's BEST course of action would be to determine if:

170. An IS auditor Is reviewing a recent security incident and is seeking information about me approval of a recent modification to a database system's security settings.

Where would the auditor MOST likely find this information?

171. Which of the following security risks can be reduced by a property configured network firewall?

172. Which of the following will MOST likely compromise the control provided By a digital signature created using RSA encryption?

173. Which of the following is the BEST reason for an organization to use clustering?

174. Which of the following is MOST important for an IS auditor to verify when evaluating an organization's firewall?

175. Which of the following is MOST important to verify when determining the completeness of the vulnerability scanning process?

176. Which of the following is MOST important for an IS auditor to consider when performing the risk assessment poor to an audit engagement?

177. An IS auditor is reviewing the release management process for an in-house software development solution.

In which environment Is the software version MOST likely to be the same as production?

178. An IS auditor should ensure that an application's audit trail:

179. Which of the following business continuity activities prioritizes the recovery of critical functions?

180. Capacity management enables organizations to:

181. A manager Identifies active privileged accounts belonging to staff who have left the organization.

Which of the following is the threat actor In this scenario?

182. The due date of an audit project is approaching, and the audit manager has determined that only 60% of the audit has been completed.

Which of the following should the audit manager do FIRST?

183. The BEST way to determine whether programmers have permission to alter data in the production environment is by reviewing:

184. Which of the following is the GREATEST risk associated with storing customer data on a web server?

185. When auditing the alignment of IT to the business strategy, it is MOST Important for the IS auditor to:

186. Which of the following is the BEST audit procedure to determine whether a firewall is configured in compliance with the organization's security policy?

187. Which of the following is the GREATEST security risk associated with data migration from a legacy human resources (HR) system to a cloud-based system?

188. An IS auditor is conducting a review of a data center.

Which of the following observations could indicate an access control Issue?

189. The waterfall life cycle model of software development is BEST suited for which of the following situations?

190. Which of the following Is the BEST way to ensure payment transaction data is restricted to the appropriate users?

191. In an online application which of the following would provide the MOST information about the transaction audit trail?

192. An IS auditor is reviewing an industrial control system (ICS) that uses older unsupported technology in the scope of an upcoming audit.

What should the auditor consider the MOST significant concern?

193. The PRIMARY focus of a post-implementation review is to verify that:

194. During an IT governance audit, an IS auditor notes that IT policies and procedures are not regularly reviewed and updated.

The GREATEST concern to the IS auditor is that policies and procedures might not:

195. An organization with many desktop PCs is considering moving to a thin client architecture.

Which of the following is the MAJOR advantage?

196. An IS auditor is reviewing security controls related to collaboration tools for a business unit responsible for intellectual property and patents.

Which of the following observations should be of MOST concern to the auditor?

197. Which of the following types of firewalls provide the GREATEST degree of control against hacker intrusion?

198. An IS auditor is evaluating the risk associated with moving from one database management system (DBMS) to another.

Which of the following would be MOST helpful to ensure the integrity of the system throughout the change?

199. Which of the following provides the MOST assurance over the completeness and accuracy ol loan application processing with respect to the implementation of a new system?

200. Which of the following findings should be of GREATEST concern to an IS auditor performing a review of IT operations?

201. The performance, risks, and capabilities of an IT infrastructure are BEST measured using a:

202. Which of the following would BEST help lo support an auditor’s conclusion about the effectiveness of an implemented data classification program?

203. Which of the following is the MAIN purpose of an information security management system?

204. Which of the following is the PRIMARY role of the IS auditor m an organization's information classification process?

205. Which of the following is MOST important to consider when scheduling follow-up audits?

206. An information systems security officer's PRIMARY responsibility for business process applications is to:

207. During a follow-up audit, it was found that a complex security vulnerability of low risk was not resolved within the agreed-upon timeframe. IT has stated that the system with the identified vulnerability is being replaced and is expected to be fully functional in two months.

Which of the following is the BEST course of action?

208. An accounting department uses a spreadsheet to calculate sensitive financial transactions.

Which of the following is the MOST important control for maintaining the security of data in the spreadsheet?

209. A project team has decided to switch to an agile approach to develop a replacement for an existing business application.

Which of the following should an IS auditor do FIRST to ensure the effectiveness of the protect audit?

210. When planning an audit to assess application controls of a cloud-based system, it is MOST important tor the IS auditor to understand the.

211. Which of the following concerns is BEST addressed by securing production source libraries?

212. During the planning stage of a compliance audit, an IS auditor discovers that a bank's inventory of compliance requirements does not include recent regulatory changes related to managing data risk.

What should the auditor do FIRST?

213. Which of the following activities would allow an IS auditor to maintain independence while facilitating a control sell-assessment (CSA)?

214. Which of the following would be an appropriate rote of internal audit in helping to establish an organization's privacy program?

215. Which of the following occurs during the issues management process for a system development

project?

216. Which of the following findings from an IT governance review should be of GREATEST concern?

217. A month after a company purchased and implemented system and performance monitoring software, reports were too large and therefore were not reviewed or acted upon The MOST effective plan of action would be to:

218. An organization that has suffered a cyber-attack is performing a forensic analysis of the affected users' computers.

Which of the following should be of GREATEST concern for the IS auditor reviewing this process?

219. A new regulation in one country of a global organization has recently prohibited cross-border transfer of personal data. An IS auditor has been asked to determine the organization's level of exposure In the affected country.

Which of the following would be MOST helpful in making this assessment?

220. Which of the following is MOST important for an IS auditor to do during an exit meeting with an auditee?

221. Which of the following controls BEST ensures appropriate segregation of dudes within an accounts payable department?

222. An internal audit department recently established a quality assurance (QA) program.

Which of the following activities Is MOST important to include as part of the QA program requirements?

223. Which of the following is the PRIMARY reason to follow a configuration management process to maintain application?

224. In data warehouse (DW) management, what is the BEST way to prevent data quality issues caused by changes from a source system?

225. The GREATEST benefit of using a polo typing approach in software development is that it helps to:

226. A new system is being developed by a vendor for a consumer service organization. The vendor will provide its proprietary software once system development is completed Which of the following is the MOST important requirement to include.

In the vendor contract to ensure continuity?

227. To enable the alignment of IT staff development plans with IT strategy, which of the following should be done FIRST?

228. An IS auditor is analyzing a sample of accesses recorded on the system log of an application. The auditor intends to launch an intensive investigation if one exception is found.

Which sampling method would be appropriate?

229. Which of the following is the BEST indicator of the effectiveness of signature-based intrusion detection systems (lDS)?

230. An IS auditor learns the organization has experienced several server failures in its distributed environment.

Which of the following is the BEST recommendation to limit the potential impact of server failures in the future?

231. IT disaster recovery time objectives (RTOs) should be based on the:

232. Which of the following documents should specify roles and responsibilities within an IT audit organization?

233. For an organization that has plans to implement web-based trading, it would be MOST important for an IS auditor to verify the organization's information security plan includes:

234. Upon completion of audit work, an IS auditor should:

235. During an audit of a multinational bank's disposal process, an IS auditor notes several findings.

Which of the following should be the auditor's GREATEST concern?

236. Which of the following BEST enables the timely identification of risk exposure?

237. What is the Most critical finding when reviewing an organization’s information security management?

238. Which of the following would provide the MOST important input during the planning phase for an audit on the implementation of a bring your own device (BYOD) program?

239. Which of the following is a social engineering attack method?

240. The IS auditor has recommended that management test a new system before using it in production mode.

The BEST approach for management in developing a test plan is to use processing parameters that are:

241. In which phase of penetration testing would host detection and domain name system (DNS) interrogation be performed?

242. Which of the following should an IS auditor consider the MOST significant risk associated with a new health records system that replaces a legacy system?

243. The IS quality assurance (OA) group is responsible for:

244. An IS audit learn is evaluating the documentation related to the most recent application user-access review performed by IT and business management It is determined that the user list was not system-generated.

Which of the following should be the GREATEST concern?

245. Which of the following should be of MOST concern to an IS auditor reviewing the public key infrastructure (PKI) for enterprise email?

246. Which of the following weaknesses would have the GREATEST impact on the effective operation of a perimeter firewall?

247. An IS auditor finds that an organization's data loss prevention (DLP) system is configured to use vendor default settings to identify violations.

The auditor's MAIN concern should be that:

248. Which of the following would BEST manage the risk of changes in requirements after the analysis phase of a business application development project?

249. In order to be useful, a key performance indicator (KPI) MUST

250. Which of the following are BEST suited for continuous auditing?

251. Due to limited storage capacity, an organization has decided to reduce the actual retention period for media containing completed low-value transactions.

Which of the following is MOST important for the organization to ensure?

252. Providing security certification for a new system should include which of the following prior to the system's implementation?

253. Which of the following would MOST effectively ensure the integrity of data transmitted over a network?

254. Which of the following should be an IS auditor's GREATEST concern when an international organization intends to roll out a global data privacy policy?

255. An IS auditor finds a high-risk vulnerability in a public-facing web server used to process online customer payments. The IS auditor should FIRST

256. Stress testing should ideally be earned out under a:

257. An organization was recently notified by its regulatory body of significant discrepancies in its reporting data. A preliminary investigation revealed that the discrepancies were caused by problems with the organization's data quality Management has directed the data quality team to enhance their program. The audit committee has asked internal audit to be advisors to the process.

To ensure that management concerns are addressed, which data set should internal audit recommend be reviewed FIRST?

258. Due to a recent business divestiture, an organization has limited IT resources to deliver critical projects Reviewing the IT staffing plan against which of the following would BEST guide IT management when estimating resource requirements for future projects?

259. Which of the following environments is BEST used for copying data and transformation into a compatible data warehouse format?

260. Which of the following would be of MOST concern for an IS auditor evaluating the design of an organization's incident management processes?

261. What is the MAIN reason to use incremental backups?

262. An organization plans to receive an automated data feed into its enterprise data warehouse from a third-party service provider.

Which of the following would be the BEST way to prevent accepting bad data?

263. Which of the following is the BEST indicator of the effectiveness of an organization's incident response program?

264. Which of the following is the BEST source of information for an IS auditor to use as a baseline to assess the adequacy of an organization's privacy policy?

265. The PRIMARY reason for an IS auditor to use data analytics techniques is to reduce which type of audit risk?

266. Which of the following would lead an IS auditor to conclude that the evidence collected during a digital forensic investigation would not be admissible in court?

267. An IS auditor performs a follow-up audit and learns the approach taken by the auditee to fix the findings differs from the agreed-upon approach confirmed during the last audit.

Which of the following should be the auditor's NEXT course of action?

268. Which of the following conditions would be of MOST concern to an IS auditor assessing the risk of a successful brute force attack against encrypted data at test?

269. Which of the following metrics would BEST measure the agility of an organization's IT function?

270. An employee loses a mobile device resulting in loss of sensitive corporate data.

Which of the following would have BEST prevented data leakage?

271. Which of the following should an IS auditor review FIRST when planning a customer data privacy audit?

272. Which of the following provides IS audit professionals with the BEST source of direction for performing audit functions?

273. A third-party consultant is managing the replacement of an accounting system.

Which of the following should be the IS auditor's GREATEST concern?

274. Which of the following MUST be completed as part of the annual audit planning process?

275. In an online application, which of the following would provide the MOST information about the transaction audit trail?

276. In an environment that automatically reports all program changes, which of the following is the MOST efficient way to detect unauthorized changes to production programs?