Free Practice Isaca CISA Exam Questions 2025

Stay ahead with 100% Free Certified Information Systems Auditor CISA Dumps Practice Questions

Page: 1 / 305

Total 1524 Questions | Updated On: Jun 05, 2025

Add To Cart

Question 1

An internal audit team is deciding whether to use an audit management application hosted by a third party in a different country. What should be the MOST important consideration related to the uploading of payroll audit documentation in the hosted application?

A : Per-unit cost charged by the hosting services provider for storage

B : Privacy regulations affecting the organization

C : Financial regulations affecting the organization

D : Data center physical access controls where the application is hosted

Answer: B

Question 2

An IS auditor who was instrumental in designing an application is called upon to review the application. The auditor should:

A : inform audit management of the earlier involvement.

B : modify the scope of the audit.

C : refuse the assignment to avoid conflict of interest.

D : use the knowledge of the application to carry out the audit.

Answer: A

Question 3

The PRIMARY objective of a control self-assessment (CSA) is to:

A : educate functional areas on risks and controls.

B : ensure appropriate access controls are implemented.

C : gain assurance for business functions that cannot be audited.

D : eliminate the audit risk by leveraging management's analysis.

Answer: A

Question 4

An IS auditor reviewing the database controls for a new e-commerce system discovers a security weakness in the database configuration. Which of the following should be the IS auditor's NEXT course of action?

A : Disclose the findings to senior management.

B : Identify existing mitigating controls.

C : ttempt to exploit the weakness.

D : Assist in drafting corrective actions.

Answer: B

Question 5

An organization has replaced all of the storage devices at its primary data center with new, higher capacity units. The replaced devices have been installed at the disaster recovery site to replace older units. An IS auditor's PRIMARY concern would be whether:

A : the recovery site devices can handle the storage requirements.

B : the procurement was in accordance with corporate policies and procedures.

C : the relocation plan has been communicated to all concerned parties.

D : a hardware maintenance contract is in place for both old and new storage devices.

Answer: A

Page: 1 / 305

Total 1524 Questions | Updated On: Jun 05, 2025

Add To Cart