Isaca CISA Quiz 446 Topic 3 Questions 2226-2230

Question: 1

A vendor service level agreement (SLA) requires backup to be physically secured. An IS audit of the backup system revealed a number of the backup media were missing. Which of the following should be the auditor's NEXT step?

ANotify executive management

BInclude the missing backup media finding in the audit report

CRecommend identification of the data stored on the missing media

DRecommend a review of the vendor's contract

Show Answer

Question: 2

Which of the following findings should be an IS auditor's GREATEST concern when reviewing an organization's purchase of new IT infrastructure hardware?

AThe new infrastructure has compatibility issues with existing system

BThe new infrastructure has residual risk within the organization's risk tolerance

CThe new infrastructure's hardening requirements are stronger than required by policy

DThe new infrastructure arrived with default system settings

Show Answer

Question: 3

Which of the following BEST enables timely detection of changes in the IT environment to support informed decision making by management?

AChange management reports

BEstablished key risk indicators (KRI)

CContinuous monitoring

DSampling checks on high risk areas

Show Answer

Question: 4

To test the integrity of the data in the accounts receivable master file, an IS auditor particularly interested in reviewing customers with balances over $400.000. the selection technique the IS auditor would use to obtain such a sample is called:

ASystematic selection

BRandom selection

CStratification

DDiscovery sampling

Show Answer

Question: 5

Which of the following should be of GREATEST concern to an IS auditor conducting an audit of an organization's backup processes?

AThe restoration process is slow due to connectivity issues.

BThe service level are not achieved

CA written backup policy is not available

DBackup failures are not resolved in a timely manner.

Show Answer

Isaca CISA Quiz:446 Topic:3 Questions:2226-2230