Confidently Practice Online with Free CISA Exam Cram

Practice your Certified Information Systems Auditor certification test with free CISA exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real CISA exam dumps, verified questions, and expert-designed free online practice tests. Moreover our Isaca CISA exam cram backed by our confidence-boosting refund guarantee.

Question 1

Which of the following is the BEST way to determine whether a test of a disaster recovery plan (DRP) was successful?

Options :

A : Analyze whether predetermined test objectives were met.

B : Perform testing at the backup data center.

C : Test offsite backup files.

D : Evaluate participation by key personnel.

Answer: A

Question 2

Which of the following is a corrective control?

Options :

A : Verifying duplicate calculations in data processing

B : Separating equipment development, testing, and production

C : Executing emergency response plans

D : Reviewing user access rights for segregation of duties

Answer: C

Question 3

Which of the following is the GREATEST concern associated with a high number of IT policy exceptions approved by management?

Options :

A : The exceptions are likely to continue indefinitely.

B : The exceptions may negatively impact process efficiency.

C : The exceptions may elevate the level of operational risk.

D : The exceptions may result in noncompliance.

Answer: C

Question 4

An IS auditor is evaluating the access controls for a shared customer relationship management (CRM) system. Which of the following would be the GREATEST concern?

Options :

A : Audit logging is not enabled.

B : Single sign-on is not enabled.

C : Complex passwords are not required.

D : Security baseline is not consistently applied.

Answer: A

Question 5

What is the MAIN purpose of an organization's internal IS audit function?

Options :

A : Provide assurance to management about the effectiveness of the organization-s risk management and internal controls

B : Provide assurance to management about the effectiveness of the organization-s risk management and internal controls

C : Independently attest the organization-s compliance with applicable legal and regulatory requirements.

Answer: A