Isaca CISA Quiz 385 Topic 1 Questions 1921-1925

Question: 1

An IS auditor has been asked to advise on the design and implementation of IT management best practices Which of the following actions would impair the auditor's independence?

AImplementing risk response on management's behalf

BEvaluating the risk management process

CProviding consulting advice for managing applications

DDesigning an embedded audit module

Show Answer

Question: 2

An organization offers an online information security awareness program to employees on an annual basis. Which of the following findings from an audit of the program should be the IS auditor's GREATEST concern?

ATraining completion is not mandatory for staff

BNew employees are given three months to complete the training.

CThe post-training test content is two years old.

DEmployees have complained about the length of the program

Show Answer

Question: 3

The objective of using coding standards for systems development is to:

Aensure that business needs are met

Bfacilitate user testing

Cfacilitate program maintenance

Densure the completeness of requirements.

Show Answer

Question: 4

Which of the following will BEST protect the confidentiality of data stored on the hard drive of a laptop computer?

ABiometric access control

BA boot password

CPhysical locks and alarms

DEncryption of the data

Show Answer

Question: 5

While performing a risk-based audit, which of the following would BEST enable an IS auditor to identify and category risk?

AUnderstanding the business environment

BUnderstanding the control framework

CAdopting qualitative risk analysis

DDeveloping a comprehensive risk model

Show Answer

Isaca CISA Quiz:385 Topic:1 Questions:1921-1925