Complete CISA Isaca Materials

Certified Information Systems Auditor Questions and Answers

Question 137

Which of the following should be of GREATEST concern to an IS auditor reviewing an organization's mobile device policies and controls in its corporate environment?

Options:

The mobile authentication policy requires biometrics.

The virtual private network (VPN) policy is not enabled for the internal corporate network.

Not all active devices are enrolled in mobile device management (MDM).

Remote wipe and lock features are only available with access to the internet.

Question 138

An IS auditor finds that the cost of developing an application is now projected to significantly exceed the budget. Which of the following is the GREATEST risk to communicate to senior management?

Options:

Noncompliance with project methodology

Inability to achieve expected benefits

Increased staff turnover

Project abandonment

Question 139

Having knowledge in which of the following areas is MOST relevant for an IS auditor reviewing public key infrastructure (PKI)?

Options:

Design and application of key controls in public audit

Security strategy in public cloud Infrastructure as a Service (IaaS)

Modern encoding methods for digital communications

Technology and process life cycle for digital certificates and key pairs

Question 140

An organization using a cloud provider for its online billing system requires the website to be accessible to customers at all times. What is the BEST way to verify the organization's business requirements are met?

Options:

Invoke the right-to-audit clause.

Require the vendor to report any outages longer than five minutes

Monitor the service level agreement (SLA) with the vendor.

Agree on periodic performance discussions with the vendor

Summer Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

Certified Information Systems Auditor Questions and Answers

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce