Free Access to ISACA.CISA.v2023-05-06.q329 with Valid Practice Test (Page 20)

Question 91

IT disaster recovery time objectives (RTOs) should be based on the:

A.nature of the outage
B.business-defined criticality of the systems.
C.maximum tolerable downtime (MTD).
D.maximum tolerable loss of data.

Question 92

Which of the following is the BEST reason to implement a data retention policy?

A.To assign responsibility and ownership for data protection outside IT
B.To limit the liability associated with storing and protecting information
C.To document business objectives for processing data within the organization
D.To establish a recovery point detective (RPO) for (toaster recovery procedures

Question 93

IS management has recently disabled certain referential integrity controls in the database management system (DBMS) software to provide users increased query performance. Which of the following controls will MOST effectively compensate for the lack of referential integrity?

A.Periodic table link checks
B.Concurrent access controls
C.More frequent data backups
D.Performance monitoring tools

Question 94

Which of the following is the BEST recommendation to prevent fraudulent electronic funds transfers by accounts payable employees?

A.Periodic vendor reviews
B.Re-keying of monetary amounts
C.Engage an external security incident response expert for incident handling.
D.Dual control
E.Independent reconciliation

Question 95

An auditee disagrees with a recommendation for corrective action that appears in the draft engagement report. Which of the following is the IS auditor's BEST course of action when preparing the final report?

A.Come to an agreement prior to issuing the final report.
B.Include the position supported by senior management in the final engagement report
C.Exclude the disputed recommendation from the final engagement report
D.Ensure the auditee's comments are included in the working papers

Question 91

Question 92

Question 93

Question 94

Question 95

Download PDF File