Isaca CISA Quiz 434 Topic 4 Questions 2166-2170

Question: 1

An IS auditor concludes that a local area network's (LAN's) access security is satisfactory. In reviewing the work, the audit manager should:

Are-perform some steps of the audit to verify the quality of the work

Bverify user management's agreement with the findings

Cassess whether the auditor had the appropriate skills to perform the work

Dverify that the elements of an agreed-upon audit plan have been addressed.

Show Answer

Question: 2

An IS auditor finds that a mortgage origination team receives customer mortgage applications via a shared repository. Which of the following test procedures is the BEST way to assess whether there are adequate privacy controls over this process?

AValidate that data is entered accurately and timely.

BValidate whether complex passwords are required.

CValidate whether the encryption is compliant with the organization's requirements.

DValidate whether documents are deleted according to data retention procedures.

Show Answer

Question: 3

A company is using a software developer for a project. At which of the following points should the software quality assurance (QA) plan be developed?

APrior to acceptance testing

BDuring the feasibility phase

CAs part of software definition

DAs part of the design phase

Show Answer

Question: 4

An organization using instant messaging to communicate with customers can prevent legitimate customers from being impersonated by:

Ausing call monitoring

Blogging conversations.

Cauthenticating users before conversations are initiated

Dusing firewalls to limit network traffic to authorized ports.

Show Answer

Question: 5

Which of the following access rights in the production environment should be granted to a developer to maintain segregation of duties?

ASystem administration

BEmergency support

CDatabase administration

DIT operations

Show Answer

Isaca CISA Quiz:434 Topic:4 Questions:2166-2170