EN简体繁體
Sign in
Home / ISACA / CISA
ISACA · CISA

CISA Exam Practice Questions

Certified Information Systems Auditor

CISA English PDF practice questions: 1823 questions in source order, with options supported by the source format, answers and available explanations. Access covers this exam only. One-time payment; no automatic renewal.

Exam overview

For IS auditors assessing audit processes, IT governance, system implementation, resilience and information asset protection.

Exam code
CISA
Official exam / credential
Certified Information Systems Auditor
Exam format
Multiple-choice questions
Exam duration
240 minutes
Official exam questions
150 questions
Official exam languages
English, Spanish, Simplified Chinese, French, German, Korean, Japanese

Official exam languages and practice-question file languages are listed separately. Confirm the exam version and available languages when booking with the provider.

Official sources: Provider reference 1 · Provider reference 2
Information checked: 2026-10-20

Supported languages

  • English
  • Simplified Chinese
Try before you buy

First 20 practice questions

1,823 total questions

Questions follow the source order. Expand each answer to see its explanation.

Disclaimer: All questions on ExamPico are compiled from internet sources and are provided for study reference only.

Question 16

Question#16Topic1

The GREATEST benefit of using a prototyping approach in software development is that it helps to:

  1. A. improve efficiency of quality assurance (QA) testing.
  2. B. conceptualize and clarify requirements.
  3. C. decrease the time allocated for user testing and review.
  4. D. minimize scope changes to the system.
Show answer

Answer

B

Question 17

Question#17Topic1

After an employee termination, a network account was removed, but the application account remained active. To keep this issue from recurring, which of the following is the BEST recommendation?

  1. A. Integrate application accounts with network single sign-on.
  2. B. Perform periodic access reviews.
  3. C. Retrain system administration staff.
  4. D. Leverage shared accounts for the application.
Show answer

Answer

A

Question 18

Question#18Topic1

During an IT governance audit, an IS auditor notes that IT policies and procedures are not regularly reviewed and updated. The GREATEST concern to the IS auditor is that policies and procedures might not:

  1. A. reflect current practices.
  2. B. be subject to adequate quality assurance (QA).
  3. C. include new systems and corresponding process changes.
  4. D. incorporate changes to relevant laws.
Show answer

Answer

A

Question 19

Question#19Topic1

Management receives information indicating a high level of risk associated with potential flooding near the organization's data center with in the next few years. As a result, a decision has been made to move data center operations to another facility on higher ground. Which approach has been adopted?

  1. A. Risk reduction
  2. B. Risk acceptance
  3. C. Risk transfer
  4. D. Risk avoidance
Show answer

Answer

D

Question 20

Question#20Topic1

An emergency power-off switch should:

  1. A. not be in the computer room.
  2. B. not be identified
  3. C. be protected.
  4. D. be illuminated.
Show answer

Answer

C

Downloads and personal use

  • Purchase this exam question set separately with 1, 3, 6 or 12 months of download access.
  • After payment confirmation, your library shows the download link and exact expiry time.
  • Download again during your term. Purchase a new term after expiry.
  • PDFs are licensed for personal study only and must not be resold or shared publicly.
  • Files already saved to your device are not remotely deleted when access expires.
How to choose your certification