CISA by ISACA Actual Free Exam Questions And Answers

Question 1

At the conclusion of an audit, but before issuing the final report, the auditor should:

A. Help management develop action plans.

B. Confirm factual findings with the auditee.

C. Obtain evidence to support findings.

D. Confirm results with the audit committee.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

Which of the following application input controls would MOST likely detect data input errors in the customer account number field during the processing of an accounts receivable transaction?

A. Parity check

B. Reasonableness check

C. Limit check

D. Validity check

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

Which of the following BEST ensures the quality and integrity of test procedures used in audit analytics?

A. Developing and communicating test procedure best practices to audit teams

B. Decentralizing procedures and Implementing periodic peer review

C. Developing and implementing an audit data repository

D. Centralizing procedures and implementing change control

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

In order to be useful, a key performance indicator (KPI) MUST

A. have a target value.

B. be changed frequently to reflect organizational strategy.

C. be approved by management.

D. be measurable in percentages.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

Which of the following is the MOST important reason to implement version control for an end-user computing (EUC) application?

A. To ensure compatibility different versions of the application

B. To ensure that only the latest approved version of the application is used

C. To ensure that only authorized users can access the application

D. To ensure that older versions are availability for reference

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

Which of the following is the MOST important action when populating a project risk register?

A. Identifying the risk scoring criteria

B. Assigning risk ownership for identified risk

C. Creating risk action plans

D. Conducting process walk-throughs

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

Upon completion of a penetration test with findings for an IT system, the NEXT step should be:

A. Analyzing all changes made to the system.

B. Maintaining the confidentiality of the testing report.

C. Vulnerability scanning and reconfirmation.

D. Remediation and retesting.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 8

An organization conducted an exercise to test the security awareness level of users by sending an email offering a cash reward 10 those who click on a link embedded in the body of the email. Which of the following metrics BEST indicates the effectiveness of awareness training?

A. The number of users deleting the email without reporting because it is a phishing email

B. The number of users forwarding the email to their business unit managers

C. The number of users reporting receipt of the email to the information security team

D. The number of users clicking on the link to learn more about the sender of the email

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 9

Which of the following is a corrective control?

A. Reviewing user access rights for segregation

B. Separating equipment development testing and production

C. Executing emergency response plans

D. Verifying duplicate calculations in data processing

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 10

A characteristic of a digital signature is that it

A. has a reproducible hashing algorithm

B. is under control of the receiver

C. is validated when data are changed

D. is unique to the message

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 11

Which of the following is an analytical review procedure for a payroll system?

A. Performing penetration attempts on the payroll system

B. Testing hours reported on time sheets

C. Performing reasonableness tests by multiplying the number of employees by the average wage rate

D. Evaluating the performance of the payroll system using benchmarking software

Discussion 0

Correct Answer: C Vote an answer

Question 12

During an IT general controls audit of a high-risk area where both internal and external audit teams are reviewing the same approach to optimize resources?

A. Ensure both the internal and external auditors perform the work simultaneously.

B. Roll forward the general controls audit to the subsequent audit year.

C. Leverage the work performed by external audit for the internal audit testing.

D. Request that the external audit team leverage the internal audit work.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

ISACA Certified Information Systems Auditor - CISA Exam Practice Test

Contact Us

Useful Links

Latest Updated