Isaca CISA Quiz 274 Topic 2 Questions 1366-1370

Question: 1

The MAJOR advantage of the risk assessment approach over the baseline approach to information security management is that it ensures:

Ainformation assets are overprotected.

Ba basic level of protection is applied regardless of asset value.

Cappropriate levels of protection are applied to information assets.

Dan equal proportion of resources are devoted to protecting all information assets.

Show Answer

Question: 2

Which of the following sampling methods is MOST useful when testing for compliance?

AAttribute sampling

BVariable sampling

CStratified mean per unit

DDifference estimation

Show Answer

Question: 3

Which of the following is the MOST likely reason why e-mail systems have become a useful source of evidence for litigation?

AMultiple cycles of backup files remain available.

BAccess controls establish accountability for e-mail activity.

CData classification regulates what information should be communicated via e-mail.

DWithin the enterprise, a clear policy for using e-mail ensures that evidence is available.

Show Answer

Question: 4

An IS auditor is assigned to perform a postimplementation review of an application system. Which of the following situations may have impaired the independence of the IS auditor? The IS auditor:

Aimplemented a specific control during the development of the application system.

Bdesigned an embedded audit module exclusively for auditing the application system.

Cparticipated as a member of the application system project team, but did not have operational responsibilities.

Dprovided consulting advice concerning application system best practices.

Show Answer

Question: 5

The PRIMARY advantage of a continuous audit approach is that it:

Adoes not require an IS auditor to collect evidence on system reliability while processing is taking place.

Brequires the IS auditor to review and follow up immediately on all information collected.

Ccan improve system security when used in time-sharing environments that process a large number of transactions.

Ddoes not depend on the complexity of an organization's computer systems.

Show Answer

Isaca CISA Quiz:274 Topic:2 Questions:1366-1370