EN简体繁體
Sign in
Home / ISACA / CISA
ISACA · CISA

CISA Exam Practice Questions

Certified Information Systems Auditor

CISA English PDF practice questions: 1823 questions in source order, with options supported by the source format, answers and available explanations. Access covers this exam only. One-time payment; no automatic renewal.

Exam overview

For IS auditors assessing audit processes, IT governance, system implementation, resilience and information asset protection.

Exam code
CISA
Official exam / credential
Certified Information Systems Auditor
Exam format
Multiple-choice questions
Exam duration
240 minutes
Official exam questions
150 questions
Official exam languages
English, Spanish, Simplified Chinese, French, German, Korean, Japanese

Official exam languages and practice-question file languages are listed separately. Confirm the exam version and available languages when booking with the provider.

Official sources: Provider reference 1 · Provider reference 2
Information checked: 2026-10-20

Supported languages

  • English
  • Simplified Chinese
Try before you buy

First 20 practice questions

1,823 total questions

Questions follow the source order. Expand each answer to see its explanation.

Disclaimer: All questions on ExamPico are compiled from internet sources and are provided for study reference only.

Question 11

Question#11Topic1

Which of the following would be MOST effective to protect information assets in a data center from theft by a vendor?

  1. A. Conceal data devices and information labels.
  2. B. Issue an access card to the vendor.
  3. C. Monitor and restrict vendor activities.
  4. D. Restrict use of portable and wireless devices.
Show answer

Answer

C

Question 12

Question#12Topic1

An employee loses a mobile device resulting in loss of sensitive corporate data. Which of the following would have BEST prevented data leakage?

  1. A. Data encryption on the mobile device
  2. B. The triggering of remote data wipe capabilities
  3. C. Awareness training for mobile device users
  4. D. Complex password policy for mobile devices
Show answer

Answer

A

Question 13

Question#13Topic1

During the evaluation of controls over a major application development project, the MOST effective use of an IS auditor's time would be to review and evaluate:

  1. A. cost-benefit analysis.
  2. B. acceptance testing.
  3. C. application test cases.
  4. D. project plans.
Show answer

Answer

D

Question 14

Question#14Topic1

Upon completion of audit work, an IS auditor should:

  1. A. provide a report to the auditee stating the initial findings.
  2. B. provide a report to senior management prior to discussion with the auditee.
  3. C. distribute a summary of general findings to the members of the auditing team.
  4. D. review the working papers with the auditee.
Show answer

Answer

A

Question 15

Question#15Topic1

During an IT general controls audit of a high-risk area where both internal and external audit teams are reviewing the same areas simultaneously, which of the following is the BEST approach to optimize resources?

  1. A. Leverage the work performed by external audit for the internal audit testing.
  2. B. Ensure both the internal and external auditors perform the work simultaneously.
  3. C. Roll forward the general controls audit to the subsequent audit year.
  4. D. Request that the external audit team leverage the internal audit work.
Show answer

Answer

A

Downloads and personal use

  • Purchase this exam question set separately with 1, 3, 6 or 12 months of download access.
  • After payment confirmation, your library shows the download link and exact expiry time.
  • Download again during your term. Purchase a new term after expiry.
  • PDFs are licensed for personal study only and must not be resold or shared publicly.
  • Files already saved to your device are not remotely deleted when access expires.
How to choose your certification