Isaca CISA Quiz 334 Topic 5 Questions 1666-1670

Question: 1

An organization has purchased a replacement mainframe computer to cope with the demands of increased business. Which of the following should be the PRIMARY concern of an IS auditor?

AThe disaster recovery plan has been reviewed and updated.

BApplication access controls are adequate.

CAppropriate tender evaluation processes have been followed.

DThe procurement is within the planned budget for the year.

Show Answer

Question: 2

Which of the following would provide the MOST reliable evidence to indicate whether employee access has been deactivated in a timely manner following termination?

AComparing termination forms with dates in the HR system

BReviewing hardware return-of-asset forms

CInterviewing supervisors to verify employee data is being updated immediately

DComparing termination forms with system transaction log entries

Show Answer

Question: 3

An IS auditor is evaluating a virtual server environment and learns that the production server, development server, and management console are housed in the same physical host. What should be the auditor's PRIMARY concern?

AThe physical host is a single point of failure

BThe management console is a single point of failure.

CThe development server and management console share the same host

DThe development and production servers share the same host

Show Answer

Question: 4

An IS auditor discovers instances where software with the same license key is depbyed to multiple workstations, in breach of the licensing agreement. Which of the following is the auditor's BEST recommendation?

AEvaluate the business case for funding of additional licenses.

BRequire business owner approval before granting software access

CRemove embedded keys from offending packages.

DImplement software licensing monitoring to manage duplications.

Show Answer

Question: 5

The GREATEST benefit of risk-based auditing is that it:

Ademonstrates compliance with regulatory requirements.

Benables alignment of resources to significant risk areas.

Callows an organization to identify and eliminate low-risk areas

Didentifies problem areas within an organization.

Show Answer

Isaca CISA Quiz:334 Topic:5 Questions:1666-1670