Isaca CISA Certified Information Systems Auditor Exam Exam Practice Test Questions

• Question 1

  - (Exam Topic 3) A company has implemented an IT segregation of duties policy. In a role-based environment, which of the following roles may be assigned to an application developer?

  • IT operator
  • System administration
  • Emergency support
  • Database administration

  Show Answer Answer: B Next

• Question 2

  - (Exam Topic 4) An IS auditor is reviewing a data conversion project Which of the following is the auditor's BEST recommendation prior to go-live?

  • Review test procedures and scenarios
  • Conduct a mock conversion test
  • Establish a configuration baseline
  • Automate the test scripts

  Show Answer Answer: B Next

• Question 3

  - (Exam Topic 4) Capacity management tools are PRIMARILY used to ensure that:

  • available resources are used efficiently and effectively
  • computer systems are used to their maximum capacity most of the time
  • concurrent use by a large number of users is enabled
  • proposed hardware acquisitions meet capacity requirements

  Show Answer Answer: A Next

• Question 4

  - (Exam Topic 4) During a project audit, an IS auditor notes that project reporting does not accurately reflect current progress. Which of the following is the GREATEST resulting impact?

  • The project manager will have to be replaced.
  • The project reporting to the board of directors will be incomplete.
  • The project steering committee cannot provide effective governance.
  • The project will not withstand a quality assurance (QA) review.

  Show Answer Answer: C Next

• Question 5

  - (Exam Topic 4) Which of the following is the BEST way to address potential data privacy concerns associated with inadvertent disclosure of machine identifier information contained within security logs?

  • Unit the use of logs to only those purposes for which they were collected
  • Restrict the transfer of log files from host machine to online storage
  • Only collect logs from servers classified as business critical
  • Limit log collection to only periods of increased security activity

  Show Answer Answer: A Next