Isaca CISA Quiz 412 Topic 4 Questions 2056-2060

Question: 1

Which of the following is the BEST indicator of a mature quality management system (QMS)?

AProjects are snowing continuous improvement

BEnd users are satisfied with the outcome of IT projects.

CMost IT projects have been completed on time and within budget.

DContinuous improvement has been integrated into business processes.

Show Answer

Question: 2

While evaluating an organization's program for tracking system interfaces and data transfers, the IS auditor notices the program does not record some of the ad hoc transfers that occur. Which of the following is the GREATEST potential risk?

APeer-to-peer data transfers may not be encrypted.

BNo repudiation controls may be Ineffective or nonexistent.

CSome ad hoc transfers may not use secure FTP sites.

DManagement reports may be Incomplete.

Show Answer

Question: 3

Which of the following would be MOST important to update once a decision has been made to outsource a critical application to a cloud service provider?

AIT budget

BBusiness impact analysis (BIA)

CIT resource plan

DProject portfolio

Show Answer

Question: 4

An IS auditor is reviewing a mobile app that allows customers to submit payments for bills. As part of the review, the auditor examines how code is developed and deployed to production. It is determined that a secure code review is done prior to each deployment to production. What type of control is being used?

ADirective

BCompensating

CPreventive

DCorrective

Show Answer

Question: 5

Which of the following should be restricted from a network administrator's privileges in an adequately segregated H" environment?

AOpening and closing network ports

BChanging existing configurations for applications

CEnsuring transmission protocols are functioning correctly

DMonitoring network traffic and detecting anomalies

Show Answer

Isaca CISA Quiz:412 Topic:4 Questions:2056-2060