ISACA

Certified Information Systems Auditor

CISA

The Certified Information Systems Auditor (CISA) certification is the global standard for professionals who audit, control, monitor, and assess an organization's information technology and business systems. It validates your ability to apply a risk-based approach to audit engagements, covering everything from IS auditing processes to the protection of information assets. Earning CISA demonstrates your expertise in IT audit and positions you for career growth in a field where professionals earn an average salary of US$149,000+.

Practice Free Questions

5Domains

24Objectives

166Practice pages

782Free questions

CISA free practice questions

Choose any objective and open any question page — no sign-in required.

Audit Frameworks and Standards

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

Audit Planning and Risk Assessment

34 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–34

Audit Execution and Evidence

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

Audit Reporting and Quality

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

IT Governance and Strategy

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

Risk and Compliance Management

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

Resource and Vendor Management

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

Performance and Quality Management

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–29

Project Governance and Management

54 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–54

Business Case and Feasibility Analysis

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

System Development Methodologies

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

Control Identification and Design

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

System Readiness and Implementation Testing

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

Implementation Configuration and Release Management

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

System Migration, Infrastructure Deployment, and Data Conversion

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

Post-implementation Review

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

IT Operations Management

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

Business Resilience and Continuity

36 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–36

Security Frameworks and Governance

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–24

Physical and Environmental Security

18 questions · 4 pages

Questions 1–5 6–10 11–15 16–18

Identity and Access Management

23 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–23

Network, Endpoint, and Data Security

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Security Operations and Monitoring

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

Incident Response and Forensics

41 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–41

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (24 objectives · 166 pages).

Certified Information Systems Auditor

CISA free practice questions

Domain 1 · Information Systems Auditing Process17% of practice bank · 4 objectives · 135 questions17%

Domain 2 · Governance and Management of IT17% of practice bank · 4 objectives · 132 questions17%

Domain 3 · Information Systems Acquisition, Development and Implementation35% of practice bank · 8 objectives · 275 questions35%

Domain 4 · Information Systems Operations and Business Resilience9% of practice bank · 2 objectives · 74 questions9%

Domain 5 · Protection of Information Assets21% of practice bank · 6 objectives · 166 questions21%