CISA Certified Information Systems Auditor Study Guide

Assessment Test

1. Seth’s organization recently experienced a security incident where an attacker was able to place offensive content on the home page of his organization’s website. Seth would like to implement a series of security controls to prevent this type of attack from occurring in the future. What goal of information security is Seth most directly addressing?
   1. Integrity
   2. Availability
   3. Nonrepudiation
   4. Confidentiality
2. Domer Delectables is a U.S. publicly traded company. They are currently undertaking a significant IT project that will redesign their access control systems. What is the best role for Internal Audit in this project?
   1. Develop procedures
   2. Design controls
   3. Provide feedback on control design
   4. Implement controls
3. Jen is building a series of controls for her organization’s information security program and is categorizing those controls by type. She is updating the organization’s firewall to include next-generation capabilities. What type of control is she working on?
   1. Detective
   2. Preventive
   3. Compensating
   4. Deterrent
4. Belinda recently assumed the CISO role at a publicly traded company. She is sorting through the corporate governance model and identifying the roles that different people and groups play in the organization. Which one of the following roles has ultimate authority for the corporation?
   1. CEO
   2. CIO
   3. Board
   4. Board chair
5. Brandon leads the information security team for a large organization and is working with the software development team to provide them with application ...