Isaca CISA Quiz 325 Topic 1 Questions 1621-1625

Question: 1

Which of the following should be of MOST concern to an IS auditor during the review of a quality management system?

AThe quality management system includes training records for IT personnel.

BIndicators are not fully represented in the quality management system.

CThere are no records to document actions for minor business processes.

DImportant quality checklists are maintained outside the quality management system.

Show Answer

Question: 2

During an audit, which of the following would be MOST helpful in establishing a baseline for measuring data quality?

ABuilt-in data error prevention application controls

BIndustry standard business definitions

CInput from customers

DValidation of rules by the business

Show Answer

Question: 3

Which of ihe following BEST indicates a need to review an organization's information security policy?

ACompletion of annual IT risk assessment

BIncreasing complexity of business transactions

CIncreasing exceptions approved by management

DHigh number of low-risk findings in the audit report

Show Answer

Question: 4

IS audit is asked 10 explain how local area network (LAN) servers can contribute to a rapid dissemination of viruses. The IS auditor's BEST response is that:

Athe server's software is the prime target and is the first to be infected

Bthe server's operating system exchanges data with each station starting at every log-on.

Cthe server's file sharing function facilitates the distribution of files and applications.

Dusers of a given server have similar usage of applications and files.

Show Answer

Question: 5

Which of the following is a directive control?

AEstablishing an information security operations team

BUpdating data loss prevention software

CImplementing an information security policy

DConfiguring data encryption software

Show Answer

Isaca CISA Quiz:325 Topic:1 Questions:1621-1625