CISA DOMAIN 4 PRACTICE
EXAM 39 QUESTIONS
Question 1: An IS auditor reviews a new virtualized server cluster supporting several critical applications. Which control provides the BEST assurance that failure of one physical host will not interrupt application processing?
Choices:
1) Daily full backups of each virtual machine 2) Automated failover of virtual machines to another host 3) Quarterly vulnerability scans of the hypervisor 4) A larger storage allocation on each host
Correct Answer: Automated failover of virtual machines to another host
Explanation: Automated failover directly addresses host failure by moving or restarting workloads on another available host. Backups support recovery after data or system loss but do not provide immediate service continuity.Question 2: While reviewing data center operations, an IS auditor �nds that environmental alarms are tested annually but the cooling system has no Page 1
documented preventive maintenance schedule. What is the auditor's MOST important concern?
Choices:
1) Cooling equipment may fail without timely detection of deteriorating components 2) Environmental alarms may generate too many events 3) The data center may use more electricity than budgeted 4) Hardware asset tags may become inaccurate Correct Answer: Cooling equipment may fail without timely detection of deteriorating components Explanation: A lack of preventive maintenance increases the likelihood of an avoidable cooling failure that could disrupt many systems. Alarm testing does not replace maintenance of the underlying environmental equipment.Question 3: An organization cannot reconcile its con�guration management database with devices discovered on the network. Which action should be performed FIRST?
Choices:
1) Replace all devices that are not in the database 2) Compare discovery results with approved asset ownership and lifecycle records 3) Increase the frequency of vulnerability scanning 4) Disable remote access to all unregistered devices Correct Answer: Compare discovery results with approved asset ownership and lifecycle records Explanation: The �rst step is to reconcile discovered assets with authoritative ownership and lifecycle records so that unknown, retired, duplicated, or improperly recorded assets can be identi�ed. Remediation should follow classi�cation of the discrepancies.Page 2
Question 4: Which metric would BEST help an IS auditor determine whether an IT
asset disposal process is e�ective?
Choices:
1) Percentage of retired assets with veri�ed data sanitization and disposal evidence 2) Average purchase price of newly acquired laptops 3) Number of help desk tickets opened by former asset users 4) Percentage of servers running in virtual machines Correct Answer: Percentage of retired assets with veri�ed data sanitization and disposal evidence Explanation: An e�ective disposal process should demonstrate that retired assets are securely sanitized and disposed of with evidence. Purchase cost and unrelated operational metrics do not show whether disposal controls worked.Question 5: A nightly payroll batch job failed because an upstream �le arrived late, but the scheduler automatically ran downstream jobs using the prior day's �le.Which control would BEST prevent recurrence?
Choices:
1) Increase processor capacity during the payroll window 2) Con�gure dependency checks that stop downstream jobs when required inputs are missing 3) Require payroll users to review all source code changes 4) Retain job output reports for one additional year Correct Answer: Con�gure dependency checks that stop downstream jobs when required inputs are missing Explanation: Job scheduling should enforce predecessor and input-�le dependencies. Stopping downstream processing when required current inputs are missing prevents production of results from stale data.Page 3