CERTIFIED INFORMATION SYSTEMS AUDITOR (CISA)
EXAMINATION QUESTIONS AND CORRECT ANSWER
WITH EXPLANATION|GRADED A+ STUDY GUIDE
SOUTHERN NEW HAMPSHIRE UNIVERSITY
1. The main focus of CISA is:
A. Programming
B. Information systems auditing
C. Ethical hacking
D. Network design
Answer: B
Rationale: CISA focuses on auditing, control, and assurance of information systems.
2. CISA certification is offered by:
A. ISACA
B. CompTIA
C. ISC²
D. Cisco
Answer: A
Rationale: ISACA administers CISA.
3. The primary role of an IS auditor is to:
A. Hack systems
B. Evaluate controls and risks
C. Build networks
D. Develop software
Answer: B
Rationale: Auditors assess controls and compliance.
4. Information system auditing ensures:
,A. Control effectiveness
B. Faster internet
C. More storage
D. Better hardware
Answer: A
Rationale: Audits evaluate internal controls.
5. The CIA triad includes:
A. Confidentiality, Integrity, Availability
B. Control, Internet, Access
C. Cyber, Identity, Audit
D. Code, Infrastructure, Access
Answer: A
Rationale: Core security principles.
6. Confidentiality ensures:
A. Data is protected from unauthorized access
B. Data is deleted
C. Data is compressed
D. Data is shared publicly
Answer: A
Rationale: Prevents unauthorized disclosure.
7. Integrity ensures:
A. Data is accurate and unaltered
B. Data is encrypted only
C. Data is deleted
D. Data is stored offline
Answer: A
Rationale: Prevents unauthorized modification.
8. Availability ensures:
, A. Systems are accessible when needed
B. Systems are offline
C. Data is lost
D. Data is encrypted only
Answer: A
Rationale: Ensures uptime and reliability.
9. Audit evidence must be:
A. Sufficient and reliable
B. Random
C. Secret
D. Hidden
Answer: A
Rationale: Evidence must support audit conclusions.
10. Types of audit evidence include:
A. Physical, documentary, analytical
B. Malware, viruses, worms
C. IP, DNS, MAC
D. Hardware, software, firmware
Answer: A
Rationale: Common audit evidence categories.
11. Internal controls are designed to:
A. Reduce risk
B. Increase hacking
C. Slow systems
D. Delete data
Answer: A
Rationale: Controls protect assets.
12. Preventive controls are used to:
EXAMINATION QUESTIONS AND CORRECT ANSWER
WITH EXPLANATION|GRADED A+ STUDY GUIDE
SOUTHERN NEW HAMPSHIRE UNIVERSITY
1. The main focus of CISA is:
A. Programming
B. Information systems auditing
C. Ethical hacking
D. Network design
Answer: B
Rationale: CISA focuses on auditing, control, and assurance of information systems.
2. CISA certification is offered by:
A. ISACA
B. CompTIA
C. ISC²
D. Cisco
Answer: A
Rationale: ISACA administers CISA.
3. The primary role of an IS auditor is to:
A. Hack systems
B. Evaluate controls and risks
C. Build networks
D. Develop software
Answer: B
Rationale: Auditors assess controls and compliance.
4. Information system auditing ensures:
,A. Control effectiveness
B. Faster internet
C. More storage
D. Better hardware
Answer: A
Rationale: Audits evaluate internal controls.
5. The CIA triad includes:
A. Confidentiality, Integrity, Availability
B. Control, Internet, Access
C. Cyber, Identity, Audit
D. Code, Infrastructure, Access
Answer: A
Rationale: Core security principles.
6. Confidentiality ensures:
A. Data is protected from unauthorized access
B. Data is deleted
C. Data is compressed
D. Data is shared publicly
Answer: A
Rationale: Prevents unauthorized disclosure.
7. Integrity ensures:
A. Data is accurate and unaltered
B. Data is encrypted only
C. Data is deleted
D. Data is stored offline
Answer: A
Rationale: Prevents unauthorized modification.
8. Availability ensures:
, A. Systems are accessible when needed
B. Systems are offline
C. Data is lost
D. Data is encrypted only
Answer: A
Rationale: Ensures uptime and reliability.
9. Audit evidence must be:
A. Sufficient and reliable
B. Random
C. Secret
D. Hidden
Answer: A
Rationale: Evidence must support audit conclusions.
10. Types of audit evidence include:
A. Physical, documentary, analytical
B. Malware, viruses, worms
C. IP, DNS, MAC
D. Hardware, software, firmware
Answer: A
Rationale: Common audit evidence categories.
11. Internal controls are designed to:
A. Reduce risk
B. Increase hacking
C. Slow systems
D. Delete data
Answer: A
Rationale: Controls protect assets.
12. Preventive controls are used to:
