Isaca CISA Quiz 565 Topic 3 Questions 2821-2825

Question: 1

An IS auditor noted that a change to a critical calculation was placed into the production environment without being tested. Which of the following is the BEST way to obtain assurance that the calculation functions correctly?

ACheck regular execution of the calculation batch job.

BObtain post-change approval from management.

CPerform substantive testing using computer-assisted audit techniques (CAATs).

DInterview the lead system developer.

Show Answer

Question: 2

An organization recently implemented a data loss prevention (DLP) solution to control data in transit. Which of the following would be the GREATEST risk related to the DLP implementation?

AScanning end-points during peak hours

BInadequate data classification

CImproperly configured DLP modules

DDLP false positive alerts

Show Answer

Question: 3

Which of the following is the GREATEST concern when using a cold backup site?

ACompatibility problems with existing equipment might exist.

BPeripheral equipment might not be sufficient to handle critical applications.

CIt is difficult to test critical applications at the backup site

DPhysical security requirements at the backup site might not be met.

Show Answer

Question: 4

An IS auditor finds that needed security patches cannot be applied to some of an organization's network devices due to compatibility issues. The organization has not budgeted sufficiently for security upgrades. Which of the following should the auditor recommend be done FIRST?

APerform a risk analysis of the relevant security issues.

BPrioritize funding for next year's budget.

CDiscuss adding compensating controls with the vendor.

DImplement stronger security patch management processes.

Show Answer

Question: 5

Which of the following is the PRIMARY reason an IS auditor should discuss observations with management before delivering a final report?

AIdentify business risks associated with the observations

BValidate the audit observations.

CAssist the management with control enhancements.

DRecord the proposed course of corrective action.

Show Answer

Isaca CISA Quiz:565 Topic:3 Questions:2821-2825