Isaca CISA Quiz 271 Topic 3 Questions 1351-1355

Question: 1

When selecting audit procedures, an IS auditor should use professional judgment to ensure that:

Asufficient evidence will be collected.

Ball significant deficiencies identified will be corrected within a reasonable period.

Call material weaknesses will be identified.

Daudit costs will be kept at a minimum level.

Show Answer

Question: 2

An IS auditor evaluating logical access controls should FIRST:

Adocument the controls applied to the potential access paths to the system.

Btest controls over the access paths to determine if they are functional.

Cevaluate the security environment in relation to written policies and practices

Dobtain an understanding of the security risks to information processing.

Show Answer

Question: 3

The PRIMARY purpose of an IT forensic audit is:

Ato participate in investigations related to corporate fraud.

Bthe systematic collection of evidence after a system irregularity.

Cto assess the correctness of an organization's financial statements

Dto determine that there has been criminal activity.

Show Answer

Question: 4

An IS auditor is performing an audit of a remotely managed server backup. The IS auditor reviews the logs for one day and finds one case where logging on a server has failed with the result that backup restarts cannot be confirmed. What should the auditor do?

AIssue an audit finding

BSeek an explanation from IS management

CReview the classifications of data held on the server

DExpand the sample of logs reviewed

Show Answer

Question: 5

In an IS audit of several critical servers, the IS auditor wants to analyze audit trails to discover potential anomalies in user or system behavior. Which of the following tools are MOST suitable for performing that task?

ACASE tools

BEmbedded data collection tools

CHeuristic scanning tools

DTrend/variance detection tools

Show Answer

Isaca CISA Quiz:271 Topic:3 Questions:1351-1355