ISACA CISA Certification Sample Questions Rated 100% Correct!!

01. An audit charter should: a) be dynamic and change to coincide with the changing nature of technology and the audit profession. b) clearly state audit objectives for, and the delegation of, authority to the maintenance and review of internal controls. c) document the audit procedures designed to achieve the planned audit objectives. d) outline the overall authority, scope and responsibilities of the audit function. - Answer: d) outline the overall authority, scope and responsibilities of the audit function. 02. When identifying an earlier project completion time, which is to be obtained by paying a premium for early completion, the activities that should be selected are those: a) that have zero slack time. b) whose sum of activity time is the shortest. c) that give the longest possible completion time. d) whose sum of slack time is the shortest. - Answer: a) that have zero slack time. 03. An IS auditor observes that an enterprise has outsourced software development to a third party that is a startup company. To ensure that the enterprise's investment in software is protected, which of the following should be recommended by the IS auditor? a) Due diligence should be performed on the software vendor. b) A quarterly audit of the vendor facilities should be performed. c) There should be a source code escrow agreement in place.d) A high penalty clause should be included in the contract. - Answer: c) There should be a source code escrow agreement in place. 04. Which of the following would BEST ensure continuity of a wide area network (WAN) across the organization? a) Built-in alternative routing b) Complete full system backup daily c) A repair contract with a service provider d) A duplicate machine alongside each server - Answer: a) Built-in alternative routing 05. An IS auditor finds a small number of user access requests that had not been authorized by managers through the normal predefined workflow steps and escalation rules. The IS auditor should: a) recommend that the owner of the identity management (IDM) system fix the workflow issues. b) report the problem to the audit committee. c) conduct a security risk assessment. d) perform an additional analysis. - Answer: d) perform an additional analysis. If You want to get more details for Preparation of ISACA CISA Certification Exam: Click Here---> - [PDF] How to Prepare for CISA exam on CISA Click Here---> -