jjj
ISACA® CISA® questions with complete
solutions 2024
Acceptable juse jpolicy j- jANS✓✓-A jpolicy jthat jestablishes jan jagreement
jbetween jusers jand jthe jenterprise jand jdefines jfor jall jparties' jthe jranges jof juse
jthat jare japproved jbefore jgaining jaccess jto ja jnetwork jor jthe jInternet.
Access jcontrol j- jANS✓✓-The jprocesses, jrules jand jdeployment jmechanisms
jthat jcontrol jaccess jto jinformation jsystems, jresources jand jphysical jaccess jto
jpremises.
Access jcontrol jlist j(ACL) j- jANS✓✓-An jinternal jcomputerized jtable jof jaccess
jrules jregarding jthe jlevels jof jcomputer jaccess jpermitted jto jlogon jIDs jand
jcomputer jterminals.
Scope jNote: jAlso jreferred jto jas jaccess jcontrol jtables.
Access jpath j- jANS✓✓-The jlogical jroute jthat jan jend juser jtakes jto jaccess
jcomputerized jinformation.
Scope jNote: jTypically jincludes ja jroute jthrough jthe joperating jsystem,
jtelecommunications jsoftware, jselected japplication jsoftware jand jthe jaccess
jcontrol jsystem
Access jrights j- jANS✓✓-The jpermission jor jprivileges jgranted jto jusers,
jprograms jor jworkstations jto jcreate, jchange, jdelete jor jview jdata jand jfiles
jwithin ja jsystem, jas jdefined jby jrules jestablished jby jdata jowners jand jthe
jinformation jsecurity jpolicy.
Adware j- jANS✓✓-A jsoftware jpackage jthat jautomatically jplays, jdisplays jor
jdownloads jadvertising jmaterial jto ja jcomputer jafter jthe jsoftware jis jinstalled jon
jit jor jwhile jthe japplication jis jbeing jused.
Scope jNote: jIn jmost jcases, jthis jis jdone jwithout jany jnotification jto jthe juser jor
jwithout jthe juser's jconsent. jThe jterm jadware jmay jalso jrefer jto jsoftware jthat
jdisplays jadvertisements, jwhether jor jnot jit jdoes jso jwith jthe juser's jconsent;
jsuch jprograms jdisplay jadvertisements jas jan jalternative jto jshareware
jregistration jfees. jThese jare jclassified jas jadware jin jthe jsense jof jadvertising
jsupported jsoftware, jbut jnot jas jspyware. jAdware jin jthis jform jdoes jnot joperate
,jjj
jsurreptitiously jor jmislead jthe juser, jand jit jprovides jthe juser jwith ja jspecific
jservice.
Alternative jrouting j- jANS✓✓-A jservice jthat jallows jthe joption jof jhaving jan
jalternate jroute jto jcomplete ja jcall jwhen jthe jmarked jdestination jis jnot javailable.
Scope jNote: jIn jsignaling, jalternative jrouting jis jthe jprocess jof jallocating
jsubstitute jroutes jfor ja jgiven jsignaling jtraffic jstream jin jcase jof jfailure(s)
jaffecting jthe jnormal jsignaling jlinks jor jroutes jof jthat jtraffic jstream.
Antivirus jsoftware j- jANS✓✓-An japplication jsoftware jdeployed jat jmultiple
jpoints jin jan jIT jarchitecture.
It jis jdesigned jto jdetect jand jpotentially jeliminate jvirus jcode jbefore jdamage jis
jdone jand jrepair jor jquarantine jfiles jthat jhave jalready jbeen jinfected
Application j- jANS✓✓-A jcomputer jprogram jor jset jof jprograms jthat jperforms jthe
jprocessing jof jrecords jfor ja jspecific jfunction.
Scope jNote: jContrasts jwith jsystems jprograms, jsuch jas jan joperating jsystem jor
jnetwork jcontrol jprogram, jand jwith jutility jprograms, jsuch jas jcopy jor jsort.
Application jcontrols j- jANS✓✓-The jpolicies, jprocedures jand jactivities jdesigned
jto jprovide jreasonable jassurance jthat jobjectives jrelevant jto ja jgiven jautomated
jsolution j(application) jare jachieved.
Application jprogramming jinterface j(API) j- jANS✓✓-A jset jof jroutines, jprotocols
jand jtools jreferred jto jas j"building jblocks" jused jin jbusiness japplication
jsoftware jdevelopment.
Scope jNote: jA jgood jAPI jmakes jit jeasier jto jdevelop ja jprogram jby jproviding jall
jthe jbuilding jblocks jrelated jto jfunctional jcharacteristics jof jan joperating jsystem
jthat japplications jneed jto jspecify, jfor jexample, jwhen jinterfacing jwith jthe
joperating jsystem j(e.g., jprovided jby jMicrosoft jWindows, jdifferent jversions jof
jUNIX). jA jprogrammer jutilizes jthese jAPIs jin jdeveloping japplications jthat jcan
joperate jeffectively jand jefficiently jon jthe jplatform jchosen.
Application jsoftware jtracing jand jmapping j- jANS✓✓-Specialized jtools jthat jcan
jbe jused jto janalyze jthe jflow jof jdata jthrough jthe jprocessing jlogic jof jthe
japplication jsoftware jand jdocument jthe jlogic, jpaths, jcontrol jconditions jand
jprocessing jsequences.
Scope jNote: jBoth jthe jcommand jlanguage jor jjob jcontrol jstatements jand
jprogramming jlanguage jcan jbe janalyzed. jThis jtechnique jincludes
jprogram/system: jmapping, jtracing, jsnapshots, jparallel jsimulations jand jcode
jcomparisons.
,jjj
Asymmetric jkey j(public jkey) j- jANS✓✓-A jcipher jtechnique jin jwhich jdifferent
jcryptographic jkeys jare jused jto jencrypt jand jdecrypt ja jmessage.
Scope jNote: jSee jPublic jkey jencryption.
Attribute jsampling j- jANS✓✓-An jaudit jtechnique jused jto jselect jitems jfrom ja
jpopulation jfor jaudit jtesting jpurposes jbased jon jselecting jall jthose jitems jthat
jhave jcertain jattributes jor jcharacteristics j(such jas jall jitems jover ja jcertain jsize).
Audit jevidence j- jANS✓✓-The jinformation jused jto jsupport jthe jaudit jopinion.
Audit jobjective j- jANS✓✓-The jspecific jgoal(s) jof jan jaudit.
Scope jNote: jThese joften jcenter jon jsubstantiating jthe jexistence jof jinternal
jcontrols jto jminimize jbusiness jrisk.
Audit jplan j- jANS✓✓-1. jA jplan jcontaining jthe jnature, jtiming jand jextent jof jaudit
jprocedures jto jbe jperformed jby jengagement jteam jmembers jin jorder jto jobtain
jsufficient jappropriate jaudit jevidence jto jform jan jopinion.
Scope jNote: jIncludes jthe jareas jto jbe jaudited, jthe jtype jof jwork jplanned, jthe
jhigh-level jobjectives jand jscope jof jthe jwork, jand jtopics jsuch jas jbudget,
jresource jallocation, jschedule jdates, jtype jof jreport jand jits jintended jaudience
jand jother jgeneral jaspects jof jthe jwork.
2. jA jhigh-level jdescription jof jthe jaudit jwork jto jbe jperformed jin ja jcertain jperiod
jof jtime.
Audit jprogram j- jANS✓✓-A jstep-by-step jset jof jaudit jprocedures jand
jinstructions jthat jshould jbe jperformed jto jcomplete jan jaudit.
Audit jrisk j- jANS✓✓-The jprobability jthat jinformation jor jfinancial jreports jmay
jcontain jmaterial jerrors jand jthat jthe jauditor jmay jnot jdetect jan jerror jthat jhas
joccurred.
Audit jtrail j- jANS✓✓-A jvisible jtrail jof jevidence jenabling jone jto jtrace jinformation
jcontained jin jstatements jor jreports jback jto jthe joriginal jinput jsource.
Authentication j- jANS✓✓-1. jThe jact jof jverifying jidentity j(i.e., juser, jsystem).
Scope jNote: jRisk: jCan jalso jrefer jto jthe jverification jof jthe jcorrectness jof ja
jpiece jof jdata.
2. jThe jact jof jverifying jthe jidentity jof ja juser jand jthe juser's jeligibility jto jaccess
jcomputerized jinformation.
, jjj
Scope jNote: jAssurance: jAuthentication jis jdesigned jto jprotect jagainst
jfraudulent jlogon jactivity. jIt jcan jalso jrefer jto jthe jverification jof jthe jcorrectness
jof ja jpiece jof jdata.
Backbone j- jANS✓✓-The jmain jcommunication jchannel jof ja jdigital jnetwork. jThe
jpart jof ja jnetwork jthat jhandles jthe jmajor jtraffic.
Scope jNote: jEmploys jthe jhighest-speed jtransmission jpaths jin jthe jnetwork jand
jmay jalso jrun jthe jlongest jdistances. jSmaller jnetworks jare jattached jto jthe
jbackbone, jand jnetworks jthat jconnect jdirectly jto jthe jend juser jor jcustomer jare
jcalled j"access jnetworks." jA jbackbone jcan jspan ja jgeographic jarea jof jany jsize
jfrom ja jsingle jbuilding jto jan joffice jcomplex jto jan jentire jcountry. jOr, jit jcan jbe
jas jsmall jas ja jbackplane jin ja jsingle jcabinet.
Backup j- jANS✓✓-Files, jequipment, jdata jand jprocedures javailable jfor juse jin jthe
jevent jof ja jfailure jor jloss, jif jthe joriginals jare jdestroyed jor jout jof jservice.
Balanced jscorecard j(BSC) j- jANS✓✓-Developed jby jRobert jS. jKaplan jand jDavid
jP. jNorton jas ja jcoherent jset jof jperformance jmeasures jorganized jinto jfour
jcategories jthat jincludes jtraditional jfinancial jmeasures, jbut jadds jcustomer,
jinternal jbusiness jprocess, jand jlearning jand jgrowth jperspectives.
Bandwidth j- jANS✓✓-The jrange jbetween jthe jhighest jand jlowest jtransmittable
jfrequencies. jIt jequates jto jthe jtransmission jcapacity jof jan jelectronic jline jand jis
jexpressed jin jbytes jper jsecond jor jHertz j(cycles jper jsecond).
Batch jcontrol j- jANS✓✓-Correctness jchecks jbuilt jinto jdata jprocessing jsystems
jand japplied jto jbatches jof jinput jdata, jparticularly jin jthe jdata jpreparation jstage.
Scope jNote: jThere jare jtwo jmain jforms jof jbatch jcontrols: jsequence jcontrol,
jwhich jinvolves jnumbering jthe jrecords jin ja jbatch jconsecutively jso jthat jthe
jpresence jof jeach jrecord jcan jbe jconfirmed; jand jcontrol jtotal, jwhich jis ja jtotal
jof jthe jvalues jin jselected jfields jwithin jthe jtransactions.
Batch jprocessing j- jANS✓✓-The jprocessing jof ja jgroup jof jtransactions jat jthe
jsame jtime.
Scope jNote: jTransactions jare jcollected jand jprocessed jagainst jthe jmaster jfiles
jat ja jspecified jtime.
Baud jrate j- jANS✓✓-The jrate jof jtransmission jfor jtelecommunications jdata,
jexpressed jin jbits jper jsecond j(bps).
ISACA® CISA® questions with complete
solutions 2024
Acceptable juse jpolicy j- jANS✓✓-A jpolicy jthat jestablishes jan jagreement
jbetween jusers jand jthe jenterprise jand jdefines jfor jall jparties' jthe jranges jof juse
jthat jare japproved jbefore jgaining jaccess jto ja jnetwork jor jthe jInternet.
Access jcontrol j- jANS✓✓-The jprocesses, jrules jand jdeployment jmechanisms
jthat jcontrol jaccess jto jinformation jsystems, jresources jand jphysical jaccess jto
jpremises.
Access jcontrol jlist j(ACL) j- jANS✓✓-An jinternal jcomputerized jtable jof jaccess
jrules jregarding jthe jlevels jof jcomputer jaccess jpermitted jto jlogon jIDs jand
jcomputer jterminals.
Scope jNote: jAlso jreferred jto jas jaccess jcontrol jtables.
Access jpath j- jANS✓✓-The jlogical jroute jthat jan jend juser jtakes jto jaccess
jcomputerized jinformation.
Scope jNote: jTypically jincludes ja jroute jthrough jthe joperating jsystem,
jtelecommunications jsoftware, jselected japplication jsoftware jand jthe jaccess
jcontrol jsystem
Access jrights j- jANS✓✓-The jpermission jor jprivileges jgranted jto jusers,
jprograms jor jworkstations jto jcreate, jchange, jdelete jor jview jdata jand jfiles
jwithin ja jsystem, jas jdefined jby jrules jestablished jby jdata jowners jand jthe
jinformation jsecurity jpolicy.
Adware j- jANS✓✓-A jsoftware jpackage jthat jautomatically jplays, jdisplays jor
jdownloads jadvertising jmaterial jto ja jcomputer jafter jthe jsoftware jis jinstalled jon
jit jor jwhile jthe japplication jis jbeing jused.
Scope jNote: jIn jmost jcases, jthis jis jdone jwithout jany jnotification jto jthe juser jor
jwithout jthe juser's jconsent. jThe jterm jadware jmay jalso jrefer jto jsoftware jthat
jdisplays jadvertisements, jwhether jor jnot jit jdoes jso jwith jthe juser's jconsent;
jsuch jprograms jdisplay jadvertisements jas jan jalternative jto jshareware
jregistration jfees. jThese jare jclassified jas jadware jin jthe jsense jof jadvertising
jsupported jsoftware, jbut jnot jas jspyware. jAdware jin jthis jform jdoes jnot joperate
,jjj
jsurreptitiously jor jmislead jthe juser, jand jit jprovides jthe juser jwith ja jspecific
jservice.
Alternative jrouting j- jANS✓✓-A jservice jthat jallows jthe joption jof jhaving jan
jalternate jroute jto jcomplete ja jcall jwhen jthe jmarked jdestination jis jnot javailable.
Scope jNote: jIn jsignaling, jalternative jrouting jis jthe jprocess jof jallocating
jsubstitute jroutes jfor ja jgiven jsignaling jtraffic jstream jin jcase jof jfailure(s)
jaffecting jthe jnormal jsignaling jlinks jor jroutes jof jthat jtraffic jstream.
Antivirus jsoftware j- jANS✓✓-An japplication jsoftware jdeployed jat jmultiple
jpoints jin jan jIT jarchitecture.
It jis jdesigned jto jdetect jand jpotentially jeliminate jvirus jcode jbefore jdamage jis
jdone jand jrepair jor jquarantine jfiles jthat jhave jalready jbeen jinfected
Application j- jANS✓✓-A jcomputer jprogram jor jset jof jprograms jthat jperforms jthe
jprocessing jof jrecords jfor ja jspecific jfunction.
Scope jNote: jContrasts jwith jsystems jprograms, jsuch jas jan joperating jsystem jor
jnetwork jcontrol jprogram, jand jwith jutility jprograms, jsuch jas jcopy jor jsort.
Application jcontrols j- jANS✓✓-The jpolicies, jprocedures jand jactivities jdesigned
jto jprovide jreasonable jassurance jthat jobjectives jrelevant jto ja jgiven jautomated
jsolution j(application) jare jachieved.
Application jprogramming jinterface j(API) j- jANS✓✓-A jset jof jroutines, jprotocols
jand jtools jreferred jto jas j"building jblocks" jused jin jbusiness japplication
jsoftware jdevelopment.
Scope jNote: jA jgood jAPI jmakes jit jeasier jto jdevelop ja jprogram jby jproviding jall
jthe jbuilding jblocks jrelated jto jfunctional jcharacteristics jof jan joperating jsystem
jthat japplications jneed jto jspecify, jfor jexample, jwhen jinterfacing jwith jthe
joperating jsystem j(e.g., jprovided jby jMicrosoft jWindows, jdifferent jversions jof
jUNIX). jA jprogrammer jutilizes jthese jAPIs jin jdeveloping japplications jthat jcan
joperate jeffectively jand jefficiently jon jthe jplatform jchosen.
Application jsoftware jtracing jand jmapping j- jANS✓✓-Specialized jtools jthat jcan
jbe jused jto janalyze jthe jflow jof jdata jthrough jthe jprocessing jlogic jof jthe
japplication jsoftware jand jdocument jthe jlogic, jpaths, jcontrol jconditions jand
jprocessing jsequences.
Scope jNote: jBoth jthe jcommand jlanguage jor jjob jcontrol jstatements jand
jprogramming jlanguage jcan jbe janalyzed. jThis jtechnique jincludes
jprogram/system: jmapping, jtracing, jsnapshots, jparallel jsimulations jand jcode
jcomparisons.
,jjj
Asymmetric jkey j(public jkey) j- jANS✓✓-A jcipher jtechnique jin jwhich jdifferent
jcryptographic jkeys jare jused jto jencrypt jand jdecrypt ja jmessage.
Scope jNote: jSee jPublic jkey jencryption.
Attribute jsampling j- jANS✓✓-An jaudit jtechnique jused jto jselect jitems jfrom ja
jpopulation jfor jaudit jtesting jpurposes jbased jon jselecting jall jthose jitems jthat
jhave jcertain jattributes jor jcharacteristics j(such jas jall jitems jover ja jcertain jsize).
Audit jevidence j- jANS✓✓-The jinformation jused jto jsupport jthe jaudit jopinion.
Audit jobjective j- jANS✓✓-The jspecific jgoal(s) jof jan jaudit.
Scope jNote: jThese joften jcenter jon jsubstantiating jthe jexistence jof jinternal
jcontrols jto jminimize jbusiness jrisk.
Audit jplan j- jANS✓✓-1. jA jplan jcontaining jthe jnature, jtiming jand jextent jof jaudit
jprocedures jto jbe jperformed jby jengagement jteam jmembers jin jorder jto jobtain
jsufficient jappropriate jaudit jevidence jto jform jan jopinion.
Scope jNote: jIncludes jthe jareas jto jbe jaudited, jthe jtype jof jwork jplanned, jthe
jhigh-level jobjectives jand jscope jof jthe jwork, jand jtopics jsuch jas jbudget,
jresource jallocation, jschedule jdates, jtype jof jreport jand jits jintended jaudience
jand jother jgeneral jaspects jof jthe jwork.
2. jA jhigh-level jdescription jof jthe jaudit jwork jto jbe jperformed jin ja jcertain jperiod
jof jtime.
Audit jprogram j- jANS✓✓-A jstep-by-step jset jof jaudit jprocedures jand
jinstructions jthat jshould jbe jperformed jto jcomplete jan jaudit.
Audit jrisk j- jANS✓✓-The jprobability jthat jinformation jor jfinancial jreports jmay
jcontain jmaterial jerrors jand jthat jthe jauditor jmay jnot jdetect jan jerror jthat jhas
joccurred.
Audit jtrail j- jANS✓✓-A jvisible jtrail jof jevidence jenabling jone jto jtrace jinformation
jcontained jin jstatements jor jreports jback jto jthe joriginal jinput jsource.
Authentication j- jANS✓✓-1. jThe jact jof jverifying jidentity j(i.e., juser, jsystem).
Scope jNote: jRisk: jCan jalso jrefer jto jthe jverification jof jthe jcorrectness jof ja
jpiece jof jdata.
2. jThe jact jof jverifying jthe jidentity jof ja juser jand jthe juser's jeligibility jto jaccess
jcomputerized jinformation.
, jjj
Scope jNote: jAssurance: jAuthentication jis jdesigned jto jprotect jagainst
jfraudulent jlogon jactivity. jIt jcan jalso jrefer jto jthe jverification jof jthe jcorrectness
jof ja jpiece jof jdata.
Backbone j- jANS✓✓-The jmain jcommunication jchannel jof ja jdigital jnetwork. jThe
jpart jof ja jnetwork jthat jhandles jthe jmajor jtraffic.
Scope jNote: jEmploys jthe jhighest-speed jtransmission jpaths jin jthe jnetwork jand
jmay jalso jrun jthe jlongest jdistances. jSmaller jnetworks jare jattached jto jthe
jbackbone, jand jnetworks jthat jconnect jdirectly jto jthe jend juser jor jcustomer jare
jcalled j"access jnetworks." jA jbackbone jcan jspan ja jgeographic jarea jof jany jsize
jfrom ja jsingle jbuilding jto jan joffice jcomplex jto jan jentire jcountry. jOr, jit jcan jbe
jas jsmall jas ja jbackplane jin ja jsingle jcabinet.
Backup j- jANS✓✓-Files, jequipment, jdata jand jprocedures javailable jfor juse jin jthe
jevent jof ja jfailure jor jloss, jif jthe joriginals jare jdestroyed jor jout jof jservice.
Balanced jscorecard j(BSC) j- jANS✓✓-Developed jby jRobert jS. jKaplan jand jDavid
jP. jNorton jas ja jcoherent jset jof jperformance jmeasures jorganized jinto jfour
jcategories jthat jincludes jtraditional jfinancial jmeasures, jbut jadds jcustomer,
jinternal jbusiness jprocess, jand jlearning jand jgrowth jperspectives.
Bandwidth j- jANS✓✓-The jrange jbetween jthe jhighest jand jlowest jtransmittable
jfrequencies. jIt jequates jto jthe jtransmission jcapacity jof jan jelectronic jline jand jis
jexpressed jin jbytes jper jsecond jor jHertz j(cycles jper jsecond).
Batch jcontrol j- jANS✓✓-Correctness jchecks jbuilt jinto jdata jprocessing jsystems
jand japplied jto jbatches jof jinput jdata, jparticularly jin jthe jdata jpreparation jstage.
Scope jNote: jThere jare jtwo jmain jforms jof jbatch jcontrols: jsequence jcontrol,
jwhich jinvolves jnumbering jthe jrecords jin ja jbatch jconsecutively jso jthat jthe
jpresence jof jeach jrecord jcan jbe jconfirmed; jand jcontrol jtotal, jwhich jis ja jtotal
jof jthe jvalues jin jselected jfields jwithin jthe jtransactions.
Batch jprocessing j- jANS✓✓-The jprocessing jof ja jgroup jof jtransactions jat jthe
jsame jtime.
Scope jNote: jTransactions jare jcollected jand jprocessed jagainst jthe jmaster jfiles
jat ja jspecified jtime.
Baud jrate j- jANS✓✓-The jrate jof jtransmission jfor jtelecommunications jdata,
jexpressed jin jbits jper jsecond j(bps).
