Isaca CISA Quiz 202 Topic 2 Questions 1006-1010

Question: 1

In regard to moving an application program from the test environment to the production environment, the BEST control would be to have the:

Aapplication programmer copy the source program and compiled object module to the production libraries.

Bapplication programmer copy the source program to the production libraries and then have the production control group compile the program.

Cproduction control group compile the object module to the production libraries using the source program in the test environment.

Dproduction control group copy the source program to the production libraries and then compile the program.

Show Answer

Question: 2

An IS auditor reviewing database controls discovered that changes to the database during normal working hours were handled through a standard set of procedures. However, changes made after normal hours required only an abbreviated number of steps. Inthis situation, which of the following would be considered an adequate set of compensating controls?

AAllow changes to be made only with the DBA user account.

BMake changes to the database after granting access to a normal user account.

CUse the DBA user account to make changes, log the changes and review the change log the following day.

DUse the normal user account to make changes, log the changes and review the change log the following day.

Show Answer

Question: 3

Which of the following tests performed by an IS auditor would be the MOST effective in determining compliance with an organization's change control procedures?

AReview software migration records and verify approvals.

Bidentify changes that have occurred and verify approvals.

CReview change control documentation and verify approvals.

DEnsure that only appropriate staff can migrate changes into production.

Show Answer

Question: 4

An IS auditor reviewing a database application discovers that the current configuration does not match the originally designed structure. Which of the following should be the IS auditor's next action?

AAnalyze the need for the structural change.

BRecommend restoration to the originally designed structure.

CRecommend the implementation of a change control process.

DDetermine if the modifications were properly approved.

Show Answer

Question: 5

A programmer maliciously modified a production program to change data and then restored the original code. Which of the following would MOST effectively detect the malicious activity?

AComparing source code

BReviewing system log files

CComparing object code

DReviewing executable and source code integrity

Show Answer

Isaca CISA Quiz:202 Topic:2 Questions:1006-1010