Isaca CISA Quiz 408 Topic 3 Questions 2036-2040

Question: 1

Previous audits have found that a large organization has had a number of segregation of duties conflicts between various roles, and the IT governance committee has asked the audit function for guidance on how to address this issue. Which of the following is the BEST recommendation?

ARevise the user organizational structure and policies

BConduct a risk assessment and develop mitigating controls.

CReview system access logs to identify escalation of user privileges.

DInstitute additional supervisory approvals when granting system access.

Show Answer

Question: 2

An organization has recently converted its infrastructure to a virtualized environment. The GREATEST benefit related to disaster recovery is that virtualized servers:

Aeliminate the manpower necessary to restore the server.

Bdecrease the recovery time objective (RTO).

Creduce the time it takes to successfully create backups.

Dcan be recreated on similar hardware faster than restoring from backups.

Show Answer

Question: 3

Which of the following should be of GREATEST concern to an organization's board when reviewing the internal audit department's quality assurance and improvement program?

AThe program does not incorporate recommendations from prior audits.

BThe program has not been approved by senior management.

CThe program does not Include periodic external assessments.

DProgram metrics have not been updated in over two years.

Show Answer

Question: 4

Which of the following indicates the HIGHEST level of maturity for an organization's information systems internal control environment?

AControls are regularly evaluated using a formally documented process.

BControls are adequately documented and control exceptions are captured.

CThe operation of controls depends on employee knowledge.

DOperational effectiveness is evaluated upon management request

Show Answer

Question: 5

Which of the following is MOST important for the successful completion of a new application system?

AAppropriate training of system analysts

BUser participation in the project development

CSteering committee approval of the new system

DCompletion of a positive cost-benefit analysis

Show Answer

Isaca CISA Quiz:408 Topic:3 Questions:2036-2040