Isaca CISA Quiz 587 Topic 3 Questions 2931-2935

Question: 1

The objective of a vulnerability identification step in a risk assessment process is to.

Adetermine the impact of compromise

Bdevelop a list of weaknesses

Cidentify the compensating controls

Ddetermine the likelihood of a threat

Show Answer

Question: 2

Which of the following is the BEST way for an IS auditor to ensure the completeness of data collected for advanced analytics during an audit?

APerform additional quality control steps after selecting the samples

BReview the query or parameters used to download the data before selecting samples

CObtain access to the quality assurance (QA) system to independently download the information

DRequest the data owner to verify and approve the information

Show Answer

Question: 3

Which of the following should occur EARLIEST in a business continuity management lifecycle?

ADefining business continuity procedures

BCarrying out a threat and risk assessment

CDeveloping a training and awareness program

DIdentifying critical business processes

Show Answer

Question: 4

Which of the following sampling techniques is BEST to use when verifying the operating effectiveness of internal controls during an audit of transactions?

AAttribute sampling

BStatistical sampling

CJudgmental sampling

DStop-or-go sampling

Show Answer

Question: 5

The BEST way to validate whether a malicious act has actually occurred in an application is to review.

Achange management logs.

Bsegregation of duties

Cactivity logs

Daccess controls

Show Answer

Isaca CISA Quiz:587 Topic:3 Questions:2931-2935