Logo ExamsQA
Exit
Official Bank 0/1525

Certified Information Systems Auditor Exam (CISA) - Isaca Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
1525 Total Questions
1
Question
An IS auditor found that a company executive is encouraging employee use of social networking sites
for business purposes. Which of the following recommendations would BEST help to reduce the risk
of data leakage?
Options
A Providing education and guidelines to employees on use of social networking sites
B Establishing strong access controls on confidential data
C Requiring policy acknowledgment and nondisclosure agreements (NDAs) signed by employees
D Monitoring employees' social networking usage
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
A warehouse employee of a retail company has been able to conceal the theft of inventory items by entering adjustments of either damaged or lost stock items lo the inventory system. Which control would have BEST prevented this type of fraud in a retail environment?
Options
A Unscheduled audits of lost stock lines
B Separate authorization for input of transactions
C Statistical sampling of adjustment transactions
D An edit check for the validity of the inventory transaction
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Which of the following should be the PRIMARY objective of a disaster recovery plan (DRP)?
Options
A Minimizing loss of information
B Assessing the risk of key applications
C Documenting all IT assets
D Identifying key business processes
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which of the following should be the IS auditor's PRIMARY focus when evaluating an organizations offsite storage facility?
Options
A Results of business continuity plan (BCP) tests
B Adequacy of physical and environmental controls
C Retention policy and period
D Shared facilities
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
An IS auditor is reviewing database fields updated in real-time and displayed through other applications in multiple organizational functions. When validating business approval for these various use cases, which of the following sources of information would be the BEST starting point?
Options
A Network map from the network administrator
B Historical database change log records
C Business process flow from management
D List of integrations from the database administrator (DBA)
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.