Question 1Audit evidence collection techniques
An IS auditor is concluding on password settings across 40 Linux servers at a university. The only evidence is a screenshot of the configuration on one server. What is the GREATEST concern?
Get ready for the CISA exam, one domain at a time.
The only interactive course with a tutor that finds your weak spots and fixes them.
Full refund within 14 days, for any reason.
More free tools
- Domain study plannerYour weeks, your hours and how confident you feel in each domain, turned into hours per domain by the exam weights.
- 15-question diagnosticWeighted like the exam outline: your score in each domain, a lesson on the weakest, and a plan. No account.
- Exam cost and retake plannerThe US$575 and US$760 fees, the 30 and 90 day retake waits and your earliest retake date.
The five domains
150 multiple-choice questions in 4 hours, scored from 200 to 800 with 450 to pass. Weights are from the current CISA Exam Content Outline.
1. Information Systems Auditing Process
Audit standards and ethics, risk-based planning, control types, sampling, evidence, data analytics, reporting and follow-up.
18% of the exam
2. Governance and Management of IT
Laws and standards, IT strategy and governance structure, policies, enterprise risk, privacy, data governance and vendors.
18% of the exam
3. Information Systems Acquisition, Development and Implementation
Project governance, business cases, development methods, application controls, testing, go-live, data conversion and post-implementation review.
12% of the exam
4. Information Systems Operations and Business Resilience
IT operations, assets, job scheduling, interfaces, end-user computing, change and incident management, logs, service levels and business resilience.
26% of the exam
5. Protection of Information Assets
Security frameworks, physical controls, identity and access, networks, encryption and PKI, cloud and mobile, attacks, monitoring, incident response and forensics.
26% of the exam
Try one question from each domain
Question 2Enterprise risk management
An IS auditor reviews the IT risk register of a hospital network. Which finding is the GREATEST concern?
Question 3Control identification and design
Clerks at a distributor key 250 supplier invoices a day in batches. Which control BEST ensures that every invoice in a batch is entered?
Question 4Business impact analysis
An IS auditor reviews a logistics company's business impact analysis. For the dispatch process, the maximum tolerable downtime is 48 hours, but the recovery time objective set by IT is 72 hours. What should the auditor conclude?
Question 5Security awareness training and programs
An IS auditor at a government agency finds that senior executives are exempt from the mandatory security awareness program because of their schedules. What is the GREATEST concern?
In the course
- 16 interactive lessons
- 161 practice questions
- 2 full 150-question, 4-hour practice exams
Guides
IT Audit Genius Pro
US$299one payment
- 16 interactive lessons
- 161 practice questions
- 2 full 150-question, 4-hour practice exams
Full refund within 14 days, for any reason. Terms
By paying you agree to our Terms. Email us within 14 days for a full refund.
Take the free diagnostic firstOne payment. No sales tax is added. Access until October 31, 2027.
Questions? support@unigenius.co.uk