An auditor is testing the effectiveness of a control that prevents unauthorized changes to a critical configuration file. The control is expected to be applied consistently to all servers. The auditor has limited time and cannot test every server. Which sampling technique is most appropriate?

Block sampling, selecting all servers in one data center.

Judgmental sampling, selecting servers that the auditor believes are most likely to have issues.

Statistical sampling, selecting a random sample that is representative of all servers.

Haphazard sampling, selecting servers that are easiest to access.

An external auditor is about to begin an audit of a healthcare organization's compliance with data protection regulations. The audit team needs to ensure that all audit activities are properly documented. Which set of documents is essential to have in place before the audit begins?

Interview notes, evidence logs, and working papers.

Audit charter, audit plan, and risk assessment documentation.

Audit report, management response, and corrective action plan.

Previous audit reports and follow-up verification records.

Which activity is part of the audit follow-up process?

Conducting initial interviews with auditees

Reviewing evidence of corrective action implementation

What is the purpose of audit quality assurance?

To ensure that all audit findings are positive

To eliminate the need for audit documentation

To reduce the time spent on audits

To ensure that audits are conducted consistently and meet established standards

Which of the following is a key component of an audit report?

A list of all employees interviewed

A detailed log of all system access events

The names of all audit team members

EC-CouncilCertified Chief Information Security Officer

Domain 2Objective 4

Understanding the Audit Management Process CCISO Practice Questions (Page 1)

Part of the Information Security Controls and Audit Management domain, which makes up ~14% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 61 practice questions to prepare you well beyond it. (estimate)

61questions here

13free pages

12concepts

Questions 1–5

1application · medium
An auditor is testing the effectiveness of a control that prevents unauthorized changes to a critical configuration file. The control is expected to be applied consistently to all servers. The auditor has limited time and cannot test every server. Which sampling technique is most appropriate?
Select an answer first
2application · medium
An external auditor is about to begin an audit of a healthcare organization's compliance with data protection regulations. The audit team needs to ensure that all audit activities are properly documented. Which set of documents is essential to have in place before the audit begins?
Select an answer first
3foundation · easy
Which activity is part of the audit follow-up process?
Select an answer first
4foundation · easy
What is the purpose of audit quality assurance?
Select an answer first
5foundation · easy
Which of the following is a key component of an audit report?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.