Logo ExamsQA
Exit
Official Bank 0/1525

Certified Information Systems Auditor Exam (CISA) - Isaca Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
1525 Total Questions
1
Question
Which of the following is MOST important to consider when determining the usefulness of audit evidence?
Options
A Nature of evidence gathered
B Timing of the evidence
C Competence of the IS auditor
D Overall objectives of the review
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Which of the following should be of GREATEST concern to an IS auditor assessing the effectiveness of an organization's vulnerability scanning program''
Options
A Results are not approved by senior management
B Steps taken to address identified vulnerabilities are not formally documented
C Scans are performed less frequently than required by the organization's vulnerability scanning schedule
D Results are not reported to individuals with authority to ensure resolution
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Which of the following should be the PRIMARY objective of a disaster recovery plan (DRP)?
Options
A Minimizing loss of information
B Assessing the risk of key applications
C Documenting all IT assets
D Identifying key business processes
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
An IS auditor who was instrumental in designing an application is called upon to review the application. The auditor should:
Options
A inform audit management of the earlier involvement.
B use the knowledge of the application to carry out the audit.
C refuse the assignment to avoid conflict of interest.
D modify the scope of the audit.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
An IS auditor is analyzing a sample of accesses recorded on the system log of an application. The auditor intends to launch an intensive investigation if one exception is found Which sampling method would be appropriate?
Options
A Variable sampling
B Discovery sampling
C Judgmental sampling
D Stratified sampling
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.