Isaca CISA Quiz 517 Topic 4 Questions 2581-2585

Question: 1

When participating as a member of a system development team, the IS auditor should be aware that:

Athe auditor's ability to perform an independent evaluation of the application after implementation will be impaired.

Bfor ongoing evaluation capability, the auditor should ensure that computer audit software is implemented in all applications.

Cthe auditor should sign a statement of independence prior to participating in the project team.

Das a control specialist, the auditor can provide significant value to the project team by making the final decision on specific controls.

Show Answer

Question: 2

During the extraction and transfer process of data from an application database to an enterprise data warehouse, some of the fields were not picked up in the extraction process and therefore did not end up in the data warehouse. Which of the following is the GREATEST concern with this situation?

AManagement decisions may be based on incorrect data.

BManagement reporting could be delayed.

CCosts associated with correcting the process may exceed budget.

DTransaction errors may occur within the application.

Show Answer

Question: 3

During an audit in a small organization, an IS auditor finds that some developers have access to migrate changes to the production environment. Which of the following should the auditor do NEXT?

AReview the information security policy.

BReview change logs for segregation of duties.

CAdvise immediate removal of developer access to production.

DVerify whether compensating controls exist.

Show Answer

Question: 4

After an employee termination, a network account was removed, but the application account remained active. To keep this issue from recurring, which of the following is the BEST recommendation?

ALeverage shared accounts for the application.

BPerform periodic access reviews.

CRetrain system administration staff.

DIntegrate application accounts with network single sign-on.

Show Answer

Question: 5

Which of the following is the MOST appropriate responsibility of an IS auditor involved in a data center renovation project?

AApproving the design of controls for the data center

BPerforming independent reviews of responsible parties engaged in the project

CShortlisting vendors to perform renovations

DEnsuring the project progresses as scheduled and milestones are achieved

Show Answer

Isaca CISA Quiz:517 Topic:4 Questions:2581-2585