CISA 試験問題を無料オンラインアクセス

What is the MAIN purpose of an organization ' s internal IS audit function?

• A.Independently attest the organization's compliance with applicable legal and regulatory requirements.
• B.Review the organization ' s policies and procedures against industry best practices and standards.
• C.Identify and initiate necessary changes in the control environment to help ensure sustainable improvement.
• D.Provide assurance to management about the effectiveness of the organization ' s risk management and internal controls.

Which of the following would an IS auditor find to be the GREATEST risk associated with the server room in a remote office location?

• A.The server room does not have biometric controls.
• B.The server room does not have temperature controls.
• C.The server room is secured by a key lock instead of an electronic lock.
• D.The server room ' s location is known by people who work in the area.

When reviewing an organization's enterprise architecture (EA), which of the following is an IS auditor MOST likely to find within the EA documentation?

• A.Contact information for key resources within the IT department
• B.Roadmaps showing the evolution from current state to future state
• C.Protocols used to communicate between systems
• D.Detailed encryption standards

A new system development project is running late against a critical implementation deadline. Which of the following is the MOST important activity?

• A.Perform user acceptance testing (UAT).
• B.Ensure that code has been reviewed.
• C.Document last-minute enhancements.
• D.Perform a pre-implementation audit.

Which of the following is the PRIMARY benefit of implementing an IT capacity management process?

• A.Reducing the cost and time to implement IT services
• B.Ensuring infrastructure meets current performance requirements
• C.Enabling rapid deployment of new software applications
• D.Helping resolve significant security concerns