Isaca CISA Quiz 455 Topic 2 Questions 2271-2275

Question: 1

Audit management has just completed the annual audit plan for the upcoming year, which consists entirely of high-risk processor. However it is determined that there are insufficient resources to execute the plan. What should be done NEXT?

ARemove audit from the annual plan to better match the number of resources available.

BReview the audit plan and defer some audits to the subsequent year

CPresent the annual plan to the audit committee and ask for more resources

DReduce the scope of the audit to better match the number of resources available

Show Answer

Question: 2

Which of the following the MOST important prerequisite for Implementing a data loss prevention (DLP) tool?

ADeveloping a DLP policy and requiring signed acknowledgement by users.

BRequiring users to save files in secured folders instead of company-wide shared drive

CIdentifying where existing data resides and establishing a data classification matrix.

DReviewing data transfer logs to determine historical patterns of data flow

Show Answer

Question: 3

When testing segregation of duties, which of the following audit techniques provides the MOST reliable evidence?

AInterviewing managers and end users

BObserving daily operations for the area in scope

CEvaluating the department structure via the organizational chart

DReviewing departmental procedure handbooks

Show Answer

Question: 4

An is auditor discovers a recurring software control process issue that severely impacts the efficiency of a critical business process. Which of the following is the BEST recommendation?

ADetermine the root cause of the issue

BDetermine the compensating controls

CReplace the malfunctioning system

DIdentity other impacted processes

Show Answer

Question: 5

Which of the following would be the GREATEST concern when an organization's disaster recovery strategy utilizes a cold site?

AThe lack of hardware components availability

BThe lack of electrical power connections

CThe lack of appropriate environmental controls

DThe lack of networking infrastructure

Show Answer

Isaca CISA Quiz:455 Topic:2 Questions:2271-2275