Isaca CISA Quiz 56 Topic 2 Questions 276-280

Question: 1

An organization has outsourced its data processing function to a service provider. Which of the following would BEST determine whether the service provider continues to meet the organization's objectives?

AAdequacy of the service provider's insurance

BPeriodic audits of controls by an independent auditor

CAssessment of the personnel training processes of the provider

DReview of performance against service level agreements (SLAs)

Show Answer

Question: 2

When auditing the alignment of IT to the business strategy, it is MOST important (or the IS auditor to:

Aevaluate deliverables of new IT initiatives against planned business services.

Bensure an IT steering committee is appointed to monitor new IT projects.

Cinterview senior managers (or their opinion of the IT function.

Dcompare the organization's strategic plan against industry best practice.

Show Answer

Question: 3

A legacy application is running on an operating system that is no longer supported by vendor, if the organization continues to use the current application, which of the application should be the IS auditor's GREATEST concern?

AInability to use the operating system due to potential licence issues

BIncreased cost of maintaining the system

CInability to update the legacy application database

DPotential exploitation of zero-day vulnerabilities in the system

Show Answer

Question: 4

An organization is acquiring a new customer relationship management (CRM) system In which of the following would the IS auditor find the MOST relevant information on projected cost savings?

ARequest for proposal (RFP)

BBusiness case

CFeasibility study document

DResults of prototype testing

Show Answer

Question: 5

An IS auditor is asked to review a large organization's change management process. Which of the following practices presents the GREATEST risk?

AChange management tickets do not contain specific documentation.

BEmergency code changes are promoted without user acceptance testing.

CTransaction data changes can be made by a senior developer.

DA system administrator performs code migration on planned downtime.

Show Answer

Isaca CISA Quiz:56 Topic:2 Questions:276-280