Isaca CISA Quiz 433 Topic 5 Questions 2161-2165

Question: 1

An IS auditor finds that periodic reviews of read-only users for a reporting system are not being performed. Which of the following should be the IS auditor's NEXT course of action?

AReport this control process weakness to senior management

BObtain a verbal confirmation from IT for this exemption.

CReview the list of end-users and evaluate for authorization.

DVerify managements approval for this exemption.

Show Answer

Question: 2

A technology service organization has recently acquired a new subsidiary. What should be the IS auditor's NEXT course of action when considering the impact on the development of the IT audit plan?

AReview the revised business impact analysis (B1A).

BProceed with the current audit plan.

CInclude the new systems in the audit plan.

DPerform a risk assessment.

Show Answer

Question: 3

The BEST data backup strategy for mobile users is to:

Ahave them regularly back up data directories onto CD and courier the backups to the head office.

Bsynchronize data directories automatically over the network.

Cmirror all data to a portable storage device.

Dhave them regularly go to branch offices to perform backups.

Show Answer

Question: 4

Which of the following is MOST important for an IS auditor to consider when determining an appropriate sample size in situations where selecting the entire population is not feasible?

ATolerable error

BData integrity

CAccessibility of the data

DResponsiveness of the auditee

Show Answer

Question: 5

To ensure the integrity of a recovered database, which of the following would be MOST useful?

ADatabase defragmentation tools

BApplication transaction logs

CA copy of the data dictionary

DBefore-and-after transaction images

Show Answer

Isaca CISA Quiz:433 Topic:5 Questions:2161-2165