CISA Practice Exam Questions and
Answers (Latest Update 2024)
Identify the most critical element from the following for the
successful implementation and ongoing regular maintenance
of an information security policy. [BAC]
A.Management support and approval for the information
security policy
B. Understanding of the information security policy by all
appropriate parties
C. Punitive actions for any violation of information security
rules
D. Stringent access control monitoring of information security
rules - Correct Answer ✅ B. An information security policy
comprises of processes, procedures, and rules in an
organization. The most important aspect of a successful
implementation of an information security policy is the
assimilation by all appropriate parties such as employees,
service providers, and business partners. Punitive actions for
any violations are related to the education and awareness of
the policy.
Fair Lending has implemented a disaster recovery plan.
Andrew, CFO of Fair Lending, wants to ensure that the
,CISA Practice Exam Questions and
Answers (Latest Update 2024)
implemented plan is adequate. Identify the immediate next
step from the following.
Initiate the Full Operational Test
Initiate the Desk-based Evaluation
Initiate the Preparedness Test
Socialize with the Senior Management and Obtain
Sponsorship - Correct Answer ✅ B. The immediate next
step to evaluate the adequacy of a disaster recovery plan
once it has been implemented is to conduct a desk-based
evaluation which is also known as a paper test. The paper
test involves walking through the plan and discussion on
what might happen in a particular type of service disruption
with the major stakeholders. As per the best practice, the
paper test precedes the preparedness test.
There are various methods of suppressing a data center fire.
Identify the MOST effective and environmentally friendly
method from the following.
Water-based systems (sprinkler systems)
,CISA Practice Exam Questions and
Answers (Latest Update 2024)
Argonite systems
Carbon dioxide systems
Dry-pipe sprinkling systems - Correct Answer ✅ D, Dry-
pipe sprinkling systems are the most effective and
environmentally friendly from the available options. In this
system, the water does not flow until the fire alarm activates
a pump. Water-based systems (sprinkler systems) are
environmentally friendly but may not present the most
effective option. In this system, the water is always present in
the piping, which can potentially leak, causing damage to
equipment.
IT risk management process comprises of following 5 steps
listed in no particular sequence. (b) Asset Identification (e)
Evaluation of Threats and Vulnerabilities to Assets (a)
Evaluation of the Impact (c) Calculation of Risk (d) Evaluation
of and Response to Risk Identify the correct sequence from
the following
b, a, e, c, d
b, e, a, c, d
b, e, a, d, c
, CISA Practice Exam Questions and
Answers (Latest Update 2024)
a, b, c, d, e - Correct Answer ✅ B. IT risk management
process comprises of following 5 steps: Step 1: Asset
Identification Step 2: Evaluation of Threats and Vulnerabilities
to Assets Step 3: Evaluation of the Impact Step 4: Calculation
of Risk Step 5: Evaluation of and Response to Risk
Palm Trading Company has implemented digital signatures to
protect email communication with their customers. Identify
the benefit of using a digital signature from the following.
Protects email content from unauthorized reading
Protects email content from data theft
Ensure timely delivery of email content
Ensures integrity of the email content - Correct Answer ✅
D. The digital signature is used for verifying the identity of
the sender and the integrity of the content.
Merlin, head of information systems audit at Cocoa Payroll
Services, was invited to a development project meeting.
During the meeting, Merlin noted that no project risks were
documented and raised this issue with the head of IT. The IT
Answers (Latest Update 2024)
Identify the most critical element from the following for the
successful implementation and ongoing regular maintenance
of an information security policy. [BAC]
A.Management support and approval for the information
security policy
B. Understanding of the information security policy by all
appropriate parties
C. Punitive actions for any violation of information security
rules
D. Stringent access control monitoring of information security
rules - Correct Answer ✅ B. An information security policy
comprises of processes, procedures, and rules in an
organization. The most important aspect of a successful
implementation of an information security policy is the
assimilation by all appropriate parties such as employees,
service providers, and business partners. Punitive actions for
any violations are related to the education and awareness of
the policy.
Fair Lending has implemented a disaster recovery plan.
Andrew, CFO of Fair Lending, wants to ensure that the
,CISA Practice Exam Questions and
Answers (Latest Update 2024)
implemented plan is adequate. Identify the immediate next
step from the following.
Initiate the Full Operational Test
Initiate the Desk-based Evaluation
Initiate the Preparedness Test
Socialize with the Senior Management and Obtain
Sponsorship - Correct Answer ✅ B. The immediate next
step to evaluate the adequacy of a disaster recovery plan
once it has been implemented is to conduct a desk-based
evaluation which is also known as a paper test. The paper
test involves walking through the plan and discussion on
what might happen in a particular type of service disruption
with the major stakeholders. As per the best practice, the
paper test precedes the preparedness test.
There are various methods of suppressing a data center fire.
Identify the MOST effective and environmentally friendly
method from the following.
Water-based systems (sprinkler systems)
,CISA Practice Exam Questions and
Answers (Latest Update 2024)
Argonite systems
Carbon dioxide systems
Dry-pipe sprinkling systems - Correct Answer ✅ D, Dry-
pipe sprinkling systems are the most effective and
environmentally friendly from the available options. In this
system, the water does not flow until the fire alarm activates
a pump. Water-based systems (sprinkler systems) are
environmentally friendly but may not present the most
effective option. In this system, the water is always present in
the piping, which can potentially leak, causing damage to
equipment.
IT risk management process comprises of following 5 steps
listed in no particular sequence. (b) Asset Identification (e)
Evaluation of Threats and Vulnerabilities to Assets (a)
Evaluation of the Impact (c) Calculation of Risk (d) Evaluation
of and Response to Risk Identify the correct sequence from
the following
b, a, e, c, d
b, e, a, c, d
b, e, a, d, c
, CISA Practice Exam Questions and
Answers (Latest Update 2024)
a, b, c, d, e - Correct Answer ✅ B. IT risk management
process comprises of following 5 steps: Step 1: Asset
Identification Step 2: Evaluation of Threats and Vulnerabilities
to Assets Step 3: Evaluation of the Impact Step 4: Calculation
of Risk Step 5: Evaluation of and Response to Risk
Palm Trading Company has implemented digital signatures to
protect email communication with their customers. Identify
the benefit of using a digital signature from the following.
Protects email content from unauthorized reading
Protects email content from data theft
Ensure timely delivery of email content
Ensures integrity of the email content - Correct Answer ✅
D. The digital signature is used for verifying the identity of
the sender and the integrity of the content.
Merlin, head of information systems audit at Cocoa Payroll
Services, was invited to a development project meeting.
During the meeting, Merlin noted that no project risks were
documented and raised this issue with the head of IT. The IT
