Isaca CISA Quiz 524 Topic 5 Questions 2616-2620

Question: 1

During a business continuity audit, an IS auditor found that the business continuity plan (BCP) only covers critical processes. The auditor should:

Arecommend that the BCP consider all business processes.

Bassess the impact of processes not covered.

Credefine the critical processes.

Dreport findings to the chief executive officer (CEO).
The business impact analysis needs to be either updated or revisited to assess the risk of not covering all processes in the plan. It is possible that the cost of including all processes might exceed the value of those processes; therefore, they should not be covered. An IS auditor should substantiate this by analyzing the risk.

Show Answer

Question: 2

In reviewing the project timeline for a significant application software development project the IS auditor notes that no time was allocated for the design and performance of program code unit tests. Which of the following should the auditor recommend?

AUnit test design should be performed after user testing is performed.

BUnit test design should be performed before program coding begins.

CUnit lest design should be performed before program specifications are defined.

DUnit testing is not necessary since exhaustive user testing will be performed.

Show Answer

Question: 3

An organization has selected a web-based solution to reduce transaction costs and improve productivity. Before implementation, an IS auditor should ensure that the organization has:

Aaddressed the level of risk exposure

Bvalidated the solution against the current IT infrastructure.

Cperformed a vulnerability assessment.

DImplemented electronic data interchange.

Show Answer

Question: 4

When engaging services from external auditors, which of the following should be established FIRST?

ATermination conditions agreements

BNondisclosure agreements

CService level agreements

DOperational level agreements

Show Answer

Question: 5

Which of the following observations should be of concern to an is auditor in the fieldwork stage of a procurement audit?

APurchase commitments are made prior to requisitions being approved.

BRequisitions are being facilitated by a third-party procurement service.

CRequisitions are being processed by the finance team.

DThe purchase requester receives notifications of goods delivery.

Show Answer

Isaca CISA Quiz:524 Topic:5 Questions:2616-2620