Isaca CISA Quiz 553 Topic 5 Questions 2761-2765

Question: 1

An IS auditor is planning an audit of an organization s payroll processes. Which of the following is the BEST procedure to provide assurance

against internal fraud?

ACompare employee work contracts against hours entered in the payroll system.

BInterview the payroll manager to obtain a detailed process workflow.

CReview management's approval of payroll system changes.

DReview management's validation of payroll payment recipients.

Show Answer

Question: 2

Which of the following is the BEST key performance indicator (KPI) for determining how well the IT policy is aligned to the business

requirements?

ANumber of inquiries regarding the policy

BTotal cost to support the policy

CNumber of approved exceptions to the policy

DTotal cost of policy breaches

Show Answer

Question: 3

Which of the following is a benefit of requiring management to issue a report to stakeholders regarding the internal controls over IT?

ATransparency of IT costs

BImproved cost management

CImproved portfolio management

DFocus on IT governance

Show Answer

Question: 4

In which of the following cloud service models does the user organization have the GREATEST control over the accuracy of configuration items in its configuration management database (CMDB)?

ASoftware as a Service (SaaS)

BDatabase as a Service (DbaaS)

CInfrastructure as a Service (laaS)

DPlatform as a Service (PaaS)

Show Answer

Question: 5

An IS auditor is assessing a recent migration of mission critical applications to a virtual platform. Which of the following observations poses the GREATEST risk to the organization?

AThe migration was not approved by the board of directors.

BTraining for staff with new virtualization responsibilities has not been conducted.

CRole descriptions do not accurately reflect new virtualization responsibilities.

DA post-implementation review of the hypervisor has not yet been conducted.

Show Answer

Isaca CISA Quiz:553 Topic:5 Questions:2761-2765