Isaca CISA Quiz 270 Topic 2 Questions 1346-1350

Question: 1

An IS auditor is evaluating a corporate network for a possible penetration by employees. Which of the following findings should give the IS auditor the GREATEST concern?

AThere are a number of external modems connected to the network.

BUsers can install software on their desktops.

CNetwork monitoring is very limited.

DMany user IDs have identical passwords.

Show Answer

Question: 2

Which of the following is the PRIMARY advantage of using computer forensic software for investigations?

AThe preservation of the chain of custody for electronic evidence

BTime and cost savings

CEfficiency and effectiveness

DAbility to search for violations of intellectual property rights

Show Answer

Question: 3

An IS auditor has imported data from the client's database. The next step-confirming whether the imported data are complete-is performed by:

Amatching control totals of the imported data to control totals of the original data.

Bsorting the data to confirm whether the data are in the same order as the original data.

Creviewing the printout of the first 100 records of original data with the first 100 records of imported data.

Dfiltering data for different categories and matching them to the original data.

Show Answer

Question: 4

The vice president of human resources has requested an audit to identify payroll overpayments for the previous year. Which would be the BEST audit technique to use in this situation?

A) Test data

AGeneralized audit software

BIntegrated test facility

CEmbedded audit module

Show Answer

Question: 5

During a security audit of IT processes, an IS auditor found that there were no documented security procedures. The IS auditor should:

Acreate the procedures document.

Bterminate the audit.

Cconduct compliance testing.

Didentify and evaluate existing practices.

Show Answer

Isaca CISA Quiz:270 Topic:2 Questions:1346-1350