Isaca CISA Quiz 427 Topic 1 Questions 2131-2135

Question: 1

A design company has multiple name and address files for its customers in several of its independent systems. Which of the following is the BEST control to ensure that the customer name and address agree across all files?

AMatching of records and review of exception reports

BUse of authorized master file change forms

CPeriodic review of each master file by management

DUse of hash totals on customer records

Show Answer

Question: 2

The BEST method an organization can employ to align its business continuity plan (BCP) and disaster recovery plan (DRP) with core business needs is to:

Ainclude BCP and disaster recovery plan responsibilities as a part of new employee training,

Bexecute periodic walk-throughs of the plans.

Cupdate the business impact analysis (BIA) for significant business changes.

Doutsource the maintenance of the BCP and disaster recovery plan to a third party.

Show Answer

Question: 3

The lack of which of the following represents the GREATEST risk to the quality of developed software?

AAn enterprise architecture

BPeriodic internal audits

CLoad testing

DCode reviews

Show Answer

Question: 4

An organization has decided to migrate payroll processing to a new platform hosted by a third party in a different country. Which of the following is MOST important for the IS auditor to consider?

AThe service provider's compliance with financial regulations

BStorage costs charged by the service provider

CWhether the contract contains a right-to-terminate clause

DThe service provider's compliance with privacy regulations

Show Answer

Question: 5

At a project steering committee meeting, it is stated that adding controls to business processes undergoing re-engineering is an unnecessary cost. The IS auditor's BEST response is that the actual control overhead for a business process is:

Ausually difficult to ascertain but is justifiable, because controls are essential to doing business.

Bthe responsibility of the project manager, and the cost should have been included in the budget.

Cusually considerable, but the benefits of good controls always exceed the cost,

Dusually less than the potential cost of failure caused by lack of controls.

Show Answer

Isaca CISA Quiz:427 Topic:1 Questions:2131-2135