Question 1Reporting and communication techniques
Management at a credit card issuer reports that a high-risk audit finding about firewall rule reviews has been remediated. What should the IS auditor do before closing the finding?
What is the CISA passing score?
You need a scaled score of 450 or higher on a scale from 200 to 800. ISACA converts your number of correct answers to the scale so that different versions of the exam are comparable.
| Questions | 150 multiple choice |
|---|---|
| Time | 4 hours (240 minutes) |
| Score scale | 200 to 800 |
| Passing score | 450 |
| Official result | Within 10 working days |
How the score works
- 800 is a perfect score, with every scored question right; 200 is the lowest possible.
- Your score is based on the total number of questions you answer correctly, whatever their domain. Domain results are for information only.
- The exam includes unscored pretest questions, which you cannot tell apart from the scored ones.
- The scale is not a percentage of questions right, and ISACA does not publish a raw cut score. Judge readiness by how you do across all five domains.
When you get your result
A preliminary pass or fail appears on screen when you finish. The official score is emailed and posted online within 10 working days. ISACA does not give question-level results. If you do not pass, you can ask for a rescore within 30 days of the result, for US$75.
Try 3 questions
Question 2Network and end-point security
An IS auditor reviews a university's perimeter firewall. Which finding is the GREATEST concern?
Question 3Control identification and design
Clerks at a distributor key 250 supplier invoices a day in batches. Which control BEST ensures that every invoice in a batch is entered?
Next step
Questions people ask
What percentage do you need to pass the CISA?
ISACA does not publish one. The pass mark is a scaled 450 on a 200 to 800 scale, converted from the number of questions you answer correctly.
Do I need to pass every domain?
No. The score is based on all the questions you answer correctly, regardless of domain; domain results are for information only.
How soon do I get my CISA result?
A preliminary pass or fail appears on screen at the end. The official score follows by email and online within 10 working days.