Isaca CISA Quiz 218 Topic 5 Questions 1086-1090

Question: 1

The reason a certification and accreditation process is performed on critical systems is to ensure that:

Asecurity compliance has been technically evaluated.

Bdata have been encrypted and are ready to be stored.

Cthe systems have been tested to run on different platforms.

Dthe systems have followed the phases of a waterfall model.

Show Answer

Question: 2

During a postimplementation review of an enterprise resource management system, an IS auditor would MOST likely:

Areview access control configuration.

Bevaluate interface testing.

Creview detailed design documentation.

Devaluate system testing.

Show Answer

Question: 3

During an application audit, an IS auditor finds several problems related to corrupted data in the database. Which of the following is a corrective control that the IS auditor should recommend?

Aimplement data backup and recovery procedures.

BDefine standards and closely monitor for compliance.

CEnsure that only authorized personnel can update the database.

DEstablish controls to handle concurrent access problems.

Show Answer

Question: 4

An IS auditor finds out-of-range data in some tables of a database. Which of the following controls should the IS auditor recommend to avoid this situation?

ALog all table update transactions.

Bimplement before-and-after image reporting.

CUse tracing and tagging.

Dimplement integrity constraints in the database.

Show Answer

Question: 5

Responsibility and reporting lines cannot always be established when auditing automated systems since:

Adiversified control makes ownership irrelevant.

Bstaff traditionally changes jobs with greater frequency.

Cownership is difficult to establish where resources are shared.

Dduties change frequently in the rapid development of technology.

Show Answer

Isaca CISA Quiz:218 Topic:5 Questions:1086-1090