Free Access to ISACA.CISA.v2023-03-04.q546 with Valid Practice Test (Page 39)

Question 186

A third-party consultant is managing the replacement of an accounting system. Which of the following should be the IS auditor's GREATEST concern?

A.Data migration is not part of the contracted activities.
B.The user department will manage access rights.
C.Testing was performed by the third-party consultant
D.The replacement is occurring near year-end reporting

Question 187

What is the PRIMARY reason to adopt a risk-based IS audit strategy?

A.To reduce the time and effort needed to perform a full audit cycle
B.To prioritize available resources and focus on areas with significant risk
C.To achieve synergy between audit and other risk management functions
D.To identity key threats, risks, and controls for the organization

Question 188

What is the BEST justification for allocating more funds to implement a control for an IT asset than the actual cost of the IT asset?

A.To avoid future audit findings
B.To protect the associated intangible business value
C.To maintain the residual value of the asset
D.To comply with information security best practices

Question 189

What is an initial step in creating a proper firewall policy?

A.Assigning access to users according to the principle of least privilege
B.Determining appropriate firewall hardware and software
C.Identifying network applications such as mail, web, or FTP servers
D.Configuring firewall access rules

Question 190

An organization recently implemented a cloud document storage solution and removed the ability for end users to save data to their local workstation hard drives. Which of the following findings should be the IS auditor's GREATEST concern?

A.Users are not required to sign updated acceptable use agreements.
B.Users have not been trained on the new system.
C.Mobile devices are not encrypted.
D.The business continuity plan (BCP) was not updated.

Question 186

Question 187

Question 188

Question 189

Question 190

Download PDF File