2026年国际注册信息系统审计师（CISA）资格考试（英文版）冲刺模拟试题及答案五
2025/12/21
来源：易考吧
导语
2026年国际注册信息系统审计师（CISA）资格考试（英文版）冲刺模拟试题及答案五,更多相关资讯请继续查看易考吧国际内审考试用书
1). Software is an intellectual property.Which of the following statements about software is true？( )
A.An employee violated the piracy laws when he copied commercial software at work to use at home for 100% business reasons
B.An employee violated the piracy laws when he copied commercial software for backup purposes
C.An employee violated the piracy laws when he copied commercial software at work to use on the road for 100% business reasons
D.The terms of the software license contract determines whether a crime or violation has taken place
正确答案：D
2). An employee approaches an IS auditor and expresses concern about a critical security issue in a newly installed application.Which of thefollowing would be theMOST appropriate action for the auditor to take？( )
A.Immediately conduct a review of the application
B.Recommend reverting to the previous application
C.Discuss the concern with audit management
D.Discuss the concern with additional end users
正确答案：D
3). Which of the following should be the GREATEST concern for an IS auditor reviewing the implementation of a security information and event management (SIEM) system？ ( )
A.Security operations center (SOC) staff have not been fully trained on how to use the SIEM
B.Network monitoring events are not aggregated into the SIEM
C.Only the last seven days of logs from the SIEM are maintained for review
D.SIEM rule tuning is only reviewed annually
正确答案：C
......
1). Software is an intellectual property.Which of the following statements about software is true？( )
A.An employee violated the piracy laws when he copied commercial software at work to use at home for 100% business reasons
B.An employee violated the piracy laws when he copied commercial software for backup purposes
C.An employee violated the piracy laws when he copied commercial software at work to use on the road for 100% business reasons
D.The terms of the software license contract determines whether a crime or violation has taken place
正确答案：D
2). An employee approaches an IS auditor and expresses concern about a critical security issue in a newly installed application.Which of thefollowing would be theMOST appropriate action for the auditor to take？( )
A.Immediately conduct a review of the application
B.Recommend reverting to the previous application
C.Discuss the concern with audit management
D.Discuss the concern with additional end users
正确答案：D
3). Which of the following should be the GREATEST concern for an IS auditor reviewing the implementation of a security information and event management (SIEM) system？ ( )
A.Security operations center (SOC) staff have not been fully trained on how to use the SIEM
B.Network monitoring events are not aggregated into the SIEM
C.Only the last seven days of logs from the SIEM are maintained for review
D.SIEM rule tuning is only reviewed annually
正确答案：C
......
