Isaca CISA Quiz 295 Topic 3 Questions 1471-1475

Question: 1

.Which of the following would prevent accountability for an action performed, thus allowing nonrepudiation?

AProper authentication

BProper identification AND authentication

CProper identification

DProper identification, authentication, AND authorization

Show Answer

Question: 2

.Which of the following is the MOST critical step in planning an audit?

AImplementing a prescribed auditing framework such as COBIT

BIdentifying current controls

CIdentifying high-risk audit targets

DTesting controls

Show Answer

Question: 3

.To properly evaluate the collective effect of preventative, detective, or corrective controls within a process, an IS auditor should be aware of which of the following? Choose the BEST answer.

AThe business objectives of the organization

BThe effect of segregation of duties on internal controls

CThe point at which controls are exercised as data flows through the system

DOrganizational control policies

Show Answer

Question: 4

.What is the recommended initial step for an IS auditor to implement continuous-monitoring systems?

ADocument existing internal controls

BPerform compliance testing on internal controls

CEstablish a controls-monitoring steering committee

DIdentify high-risk areas within the organization

Show Answer

Question: 5

.What type of risk is associated with authorized program exits (trap doors)? Choose the BEST answer.

ABusiness risk

BAudit risk

CDetective risk

DInherent risk

Show Answer

Isaca CISA Quiz:295 Topic:3 Questions:1471-1475