Isaca CISA Quiz 573 Topic 3 Questions 2861-2865

Question: 1

Which of the following should an IS auditor review FIRST when evaluating a business process for auditing?

ACompetence of the personnel performing the process

BDesign and implementation of controls

CEvidence that IS-related controls are operating effectively

DAssignment of responsibility for process management

Show Answer

Question: 2

A review of IT interface controls finds an organization does not have a process to identify and correct records that do not get transferred to the receiving system. Which of the following is.........

AImplement software to perform automatic reconciliations of data between systems

BAutomate the transfer of data between systems as much as feasible.

CEnable automatic encryption, decryption and electronic signing of data files

DHave coders perform manual reconciliation of data between systems

Show Answer

Question: 3

When measuring the effectiveness of a security awareness program, the MOST helpful key performance indicator (KPI) is the number of:

Aemployees who have signed the information security policy.

Bemployees passing a phishing exercise.

Cemployees attending security awareness training.

Dsecurity incidents detected by tools.

Show Answer

Question: 4

Which of the following observations should be of GREATEST concern to an IS auditor reviewing a hosted virtualized environment where each guest operating system (OS) is r

AThere are file shares between the host OS and the guest OS

BAccess to virtualization utilities and tools in the host is not restricted

CThe test environment of the applications is in a separate guest OS

DAll virtual machines are launching an application backup job at the same time

Show Answer

Question: 5

Which of the following is the BEST way to reduce sampling risk?

APlan the audit in accordance with generally accepted auditing principles

BEnsure each item has an equal chance to be selected

CAssign experienced auditors to the sampling process.

DAlign the sampling approach with the one used by external auditors

Show Answer

Isaca CISA Quiz:573 Topic:3 Questions:2861-2865