CISA Domain 4A-1 Practice Test 002

This practice test covers Domain 4 (Information Systems Operations & Business Resilience) Subdomain A-1 (IT Components) from the CISA exam content outline.

These questions are inspired by the ISACA CISA exam and are designed to help you test your knowledge of information systems auditing, governance, risk management, IT operations, business resilience, and information asset protection.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the audit judgment, control evaluation, and risk-based decision-making skills tested in the CISA exam.

Note: CISA and Certified Information Systems Auditor are registered trademarks of ISACA. This content is not affiliated with or endorsed by ISACA.

To choose CISA practice tests based on specific domains and subdomains, click that link.

CISA 4A-1 IT Components Practice Test 002

10 questions • Single best answer

Question 1

A credit union engages an external IS auditor to evaluate the infrastructure supporting its core banking platform. The platform runs on a two-node server cluster designed for high availability, but both nodes connect through a single network switch and share one storage controller. Which observation should the auditor consider MOST significant?

A. Failover between the cluster nodes has not been tested within the past year B. The two cluster nodes were purchased from different hardware product generations C. The shared switch and storage controller are single points of failure D. The cluster nodes are not maintained at an identical operating system patch level

Question 2

During an audit of a hospital's data center, an IS auditor learns that the infrastructure team updates server and network device firmware using image files downloaded from various websites. No record exists of where the images were obtained or whether their integrity was verified. What should the auditor recommend FIRST?

A. Require firmware to come from vendor sources and be integrity-verified before installation B. Limit all firmware updates to the approved quarterly maintenance windows only C. Replace existing devices with models that support automatic firmware updating D. Require the infrastructure team to record every firmware version that is installed

Question 3

An IS auditor at a state transportation department must confirm that production servers are configured according to the approved hardening baseline. The systems administrator provides a signed attestation and screenshots from three servers that the administrator selected. Which of the following would provide the BEST evidence?

A. A walkthrough in which the administrator demonstrates the hardening procedure B. A copy of the approved hardening baseline together with its revision history C. The administrator's attestation supported by screenshots from additional servers D. Auditor-run configuration scans of a sample of servers compared to the baseline

Question 4

A software company's internal audit team reviews its server virtualization environment. The hypervisor management console, which can create, clone, and delete every production virtual machine, is reachable from the general corporate network. Twelve administrators log in to the console using a single shared account. Which control weakness poses the GREATEST risk?

A. Virtual machines in the console are not tagged with a business owner B. Shared, network-exposed access to the console removes accountability C. Virtual machine snapshots are retained longer than the documented policy D. Guest operating systems on the hosts are not all running the same version

Question 5

An audit manager scoping an IT operations audit at an insurance company reviews how hardware health is monitored. Alerts for disk failures, fan faults, and power-supply warnings on production servers are sent to a shared mailbox that is not assigned to any team or individual. What should the IS auditor conclude?

A. The monitoring tool is configured incorrectly and should be replaced B. Hardware redundancy adequately compensates for the unreviewed alerts C. Component failures may go unaddressed until they cause service outages D. Alerts should be routed directly to the vendor under the support contract

Question 6

An IS auditor is planning an audit of a retail chain's IT infrastructure, which includes data center servers, network devices, storage arrays, and point-of-sale terminals across 300 stores. Management requests that the audit concentrate on recently purchased data center hardware. How should the auditor BEST determine which components to include in scope?

A. Assess the criticality and risk of components that support key business processes B. Focus on the recently purchased data center hardware as management has requested C. Select components at random from the complete enterprise asset inventory D. Prioritize components with the highest acquisition and ongoing maintenance costs

Question 7

During a review of a law firm's office infrastructure, an IS auditor finds that multifunction printers retain scanned client documents on internal hard drives. The drives are not encrypted, and the printers are returned to the leasing company at contract end without any data sanitization. Which recommendation is MOST appropriate?

A. Restrict the printers to documents that are not classified as confidential B. Require the leasing company to sign a confidentiality agreement with the firm C. Disable the scan-to-email function on all of the firm's multifunction printers D. Enable drive encryption and sanitize the drives before devices are returned

Question 8

A payment processor relies on a pair of load balancers to distribute transactions across its application servers. Management states that the secondary load balancer will automatically take over if the primary fails, citing the vendor's design documentation. Which audit procedure provides the BEST assurance that failover works as intended?

A. Reviewing the vendor's design documentation and published product certifications B. Reviewing results and logs from a recent controlled failover test of the pair C. Interviewing the network engineers responsible for configuring the devices D. Inspecting the load balancer configuration for an enabled failover setting

Question 9

A prior IS audit recommended that a government agency disable unnecessary services on its production database servers. Management now reports the recommendation as fully implemented and provides a revised server build standard that excludes those services. What should the IS auditor do to BEST verify that the risk has been addressed?

A. Test a sample of production servers to confirm unnecessary services are disabled B. Accept the revised build standard as evidence that remediation is complete C. Obtain written confirmation from the administrators who manage the servers D. Review the change tickets raised to approve the build standard revision

Question 10

A manufacturer connects its production-line industrial controllers to the corporate network so engineers can monitor output remotely. The controllers run a proprietary operating system that cannot be patched without vendor involvement, and the vendor maintains an always-on remote support connection. Which recommendation would BEST reduce the associated risk?

A. Replace the controllers with commodity servers running a supported operating system B. Require the vendor to certify annually that its remote connection is secure C. Segment the controllers and enable vendor access only upon approved request D. Install endpoint antivirus software on each of the industrial controllers

Related Posts

Leave a Comment Cancel Reply