CISA Exam Review Questions & 100% Correct Answers

Audit Charter :~~ An overarching document that covers the entire scope of the audit activities in an entity. (Purpose, responsibility, authority, and accountability). An engagement letter is more focused on a particular audit exercise that is sought to be initiated in an organization with a ...

In a public key infrastructure (PKI), which of the following may be relied upon to prove that an online transaction was authorized by a specific customer? Correct A. Nonrepudiation B. Encryption C. Authentication D. Integrity . :~~ You are correct, the answer is A. A. Nonrepudiation, achi...

Which of the following best describes a baseline document? a. A PCI industry standard requiring a 15-minute session timeout b. Installation step recommendations from the vendor for an Active Directory server c. A network topography diagram of the Active Directory forest d. Security configurati...

An IS auditor is reviewing access to an application to determine whether the 10 most recent "new user" forms were correctly authorized. This is an example of: :~~ compliance testing. The decisions and actions of an IS auditor are MOST likely to affect which of the following risks? :~~ Det...

Where in the Word program window can you find the top and bottom margins? :~~ vertical ruler What is an interactive object that you use to customize a document with your own information called? :~~ content control In the accompanying figure, the text labeled 3 is ____. :~~ Justified Press...

You can use a ___ function to return a value from a table that is based on an approximate match lookup. :~~ VLOOKUP The ___ error value means that a value is not available to a function or formula. :~~ #N/A If you are creating a calculated column or formula within an Excel table, you can u...

An IS auditor is conducting a compliance test to determine whether controls support management policies and procedures. The test will assist the IS auditor to determine: :~~ That the control is operating as designed Compliance tests can be used to test the existence and effectiveness of a de...

Source code :~~ uncompiled, archive code Object code :~~ compiled code that is distributed and put into production; not able to be read by humans Inherent risk :~~ the risk that an error could occur assuming no compensating control exist Control risk :~~ the risk that an error exists ...

5 Tasks within the domain covering the process of auditing information systems :~~ 1. Develop and implement a risk-based IT audit strategy in compliance with IT audit standards to ensure that key areas are included 2. Plan specific audits to determine whether information systems are protected, ...

A company with a limited budget has a recovery time objective (RTO) of 72 hours and a recovery point objective (RPO) of 24 hours. Which of the following would BEST meet the requirements of the business? Select an answer: A. A hot site B. A cold site C. A mirrored site D. A warm site...

An organization is proposing to establish a wireless local area network (WLAN). Management asks the IS auditor to recommend security controls for the WLAN. Which of the following would be the MOST appropriate recommendation? Select an answer: A. Physically secure wireless access points to pr...

Digital signatures require the: Select an answer: A. signer to have a public key and the receiver to have a private key. B. signer to have a private key and the receiver to have a public key. C. signer and receiver to have a public key. D. signer and receiver to have a private key. :~...

The PRIMARY advantage of a continuous audit approach is that it: Select an answer: A. does not require an IS auditor to collect evidence on system reliability while processing is taking place. B. requires the IS auditor to review and follow up immediately on all information collected. C. ca...

Sharing risk is a key factor in which of the following methods of managing risk? Select an answer: A. Transferring risk B. Tolerating risk C. Terminating risk D. Treating risk CORRECT A. Transferring risk (e.g., by taking an insurance policy) is a way to share risk. B. Tolerating r...