CISA—Certified Information Systems Auditor - Part 374

1. Which of the following would be the BEST way to address segregation of duties issues in an organization with budget constraints?

A) Perform an independent audit.
B) Rotate job duties periodically.
C) Implement compensating controls.
D) Hire temporary staff.



2. In a large organization, IT deadlines on important projects have been missed because IT resources are not prioritized properly. Which of the following is the BEST recommendation to address this problem?

A) Implement project portfolio management.
B) Implement an integrated resource management system.
C) Implement a comprehensive project scorecard.
D) Revisit the IT strategic plan.



3. Which of the following would be MOST useful when analyzing computer performance?

A) Report of off-peak utilization and response time
B) Tuning of system software to optimize resource usage
C) Operations report of user dissatisfaction with response time
D) Statistical metrics measuring capacity utilization



4. When migrating critical systems to a cloud provider, the GREATEST data security concern for an organization would be that data from different clients may be:

A) subject to different SLAs for disaster recovery.
B) subject to varying government compliance regulations.
C) improperly separated from each other.
D) requested during a legal discovery process.



5. As part of a post-implementation review, the BEST way to assess the realization of outcomes is by:

A) obtaining feedback from the user community.
B) performing a comprehensive risk analysis.
C) evaluating the actual performance of the system.
D) comparing the business case benefits to the archived benefits.