Isaca CISA Quiz 32 Topic 1 Questions 156-160

Question: 1

Code changes are compiled and placed in a change folder by the developer. An implementation learn migrates changes to production from the change folder. Which of the following BEST indicates separation of duties is in place during the migration process?

AA second individual performs code review before the change is released to production.

BThe implementation team does not have access to change the source code.

CThe implementation team does not have experience writing code.

DThe developer approves changes prior to moving them to the change folder.

Show Answer

Question: 2

An organization sends daily backup media by courier to an offsite location. Which of the following provides the BEST evidence that the media is transported reliably?

ADocumented backup media transport procedures

BSigned acknowledgments by offsite manager

CCertification of the courier company

DDelivery schedule of the backup media.

Show Answer

Question: 3

Which of the following should be the PRIMARY objective of conducting an audit follow-up of management action plans?

ATo verify that risks listed in the audit report have been properly mitigated

BTo identify new risks and controls for the organization

CTo align the management action plans with business requirements

DTo ensure senior management is aware of the audit finidings.

Show Answer

Question: 4

Which of the following approaches would utilize data analytics to facilitate the testing of a new account creation process?

AReview new account applications submitted in the past month for invalid dates of birth

BEvaluate configuration settings for the date of birth field requirements.

CReview the business requirements document for date of birth field requirements.

DAttempt to submit new account applications with invalid dates of birth

Show Answer

Question: 5

Which of the following is the BEST way for an IS auditor to validate that employees have been made aware of the organization's information security policy?

AInterview employees to determine their level of understanding of the policy

BCompare the employee roster against a list of those who attended security training

CReview HR records for employee violations of the information security policy.

DReview the training process to determine how policies are explained to employees

Show Answer

Isaca CISA Quiz:32 Topic:1 Questions:156-160