Isaca CISA Quiz 591 Topic 2 Questions 2951-2955

Question: 1

Compared to developing a system in-house, acquiring a software package means that the need for testing by end users is:

Aeliminated.

Bincreased.

Creduced.

Dunchanged.

Show Answer

Question: 2

An organization's business function wants to capture customer data and must comply with global data protection regulations. Which of the following should be considered FIRST?

AThe location of data storage

BThe encryption method for the data

CThe attributes of collected data

DThe legal basis for collecting the data

Show Answer

Question: 3

Which of the following would provide an IS auditor with the MOST assurance when auditing the implementation of a new application system?

ASubstantive testing

BStatistical sampling

CSign-off by system owner

DAttribute sampling

Show Answer

Question: 4

What is the BEST justification for allocating more funds to implement a control for an IT asset than the actual cost of the IT asset?

ATo protect the associated intangible business value

BTo comply with information security best practices

CTo avoid future audit findings

DTo maintain the residual value of the asset

Show Answer

Question: 5

An IS auditor is reviewing database log settings and notices that only INSERT and DELETE operations are being monitored in the database. What is the MOST significant risk?

AMetadata may not be logged.

BPurged records may not be logged.

CNewly added records may not be logged.

DChanges to existing records may not be logged.

Show Answer

Isaca CISA Quiz:591 Topic:2 Questions:2951-2955