Isaca CISA Quiz 211 Topic 3 Questions 1051-1055

Question: 1

Which of the following should be of PRIMARY concern to an IS auditor reviewing the

management of external IT service providers?

AMinimizing costs for the services provided

BProhibiting the provider from subcontracting services

CEvaluating the process for transferring knowledge to the IT department

DDetermining if the services were provided as contracted

Show Answer

Question: 2

IT best practices for the availability and continuity of IT services should:

Aminimize costs associated with disaster-resilient components.

Bprovide for sufficient capacity to meet the agreed upon demands of the business.

Cprovide reasonable assurance that agreed upon obligations to customers can be met.

Dproduce timely performance metric reports.

Show Answer

Question: 3

During a human resources (HR) audit, an IS auditor is informed that there is a verbal agreement between the IT and HR departments as to the level of IT services expected. In this situation, what should the IS auditor do FIRST?

APostpone the audit until the agreement is documented

BReport the existence of the undocumented agreement to senior management

CConfirm the content of the agreement with both departments

DDraft a service level agreement (SLA) for the two departments

Show Answer

Question: 4

Which of the following procedures would MOST effectively detect the loading of illegal software packages onto a network?

AThe use of diskless workstations

BPeriodic checking of hard drives

CThe use of current antivirus software

DPolicies that result in instant dismissal if violated

Show Answer

Question: 5

To determine which users can gain access to the privileged supervisory state, which of the following should an IS auditor review?

ASystem access log files

BEnabled access control software parameters

CLogs of access control violations

DSystem configuration files for control options used

Show Answer

Isaca CISA Quiz:211 Topic:3 Questions:1051-1055