CISA Certified Information Systems Auditor 5

Question 1

Which of the following frameworks is MOST commonly used to assess IT governance and management practices in a CISA audit?

Accepted Answer

COBIT 2019

Answer

COBIT 2019 is ISACA's primary framework for IT governance and management, directly aligned with CISA's domain focus.

Question 2

An auditor reviewing patch management finds that critical patches are applied within 30 days but the vendor recommends 7 days. What is the auditor's BEST conclusion?

Accepted Answer

The organization is exposed to elevated risk during the gap period

Answer

Delaying critical patches beyond vendor recommendations leaves known vulnerabilities unaddressed, increasing exposure to exploitation.

Question 3

When conducting an audit of logical access controls, an auditor should PRIMARILY verify that:

Accepted Answer

Access rights are based on business need and reviewed periodically

Answer

Logical access controls should enforce least privilege and be subject to periodic recertification to ensure ongoing appropriateness.

Question 4

An IS auditor is assessing an organization's incident response capability. Which element is MOST critical for a mature program?

Accepted Answer

Documented procedures that have been tested and rehearsed

Answer

Documented, tested incident response procedures ensure the organization can respond effectively and consistently when an incident occurs.

Question 5

Which of the following BEST demonstrates due diligence by IT management regarding information security?

Accepted Answer

Conducting regular risk assessments and acting on findings

Answer

Due diligence requires actively identifying risks and taking informed action, not just transferring or delegating responsibility.

CISA - Certified Information Systems Auditor Practice Test

CISA - Certified Information Systems Auditor Practice Test

CISA Certified Information Systems Auditor 5