Isaca CISA Quiz 562 Topic 5 Questions 2806-2810

Question: 1

Which of the following is a preventive control related to change management?

AImplementation of managed change approval processes

BLog review of managed changes

CDebugging of implemented changes

DAudit of implemented changes for the period under review

Show Answer

Question: 2

Which of the following factors constitutes a strength in regard to the use of a disaster recovery planning reciprocal agreement?

AReciprocal agreements may not be formally established in a contract.

BThe two companies might share a need for a specialized piece of equipment

CChanges to the hardware or software environment by one company could make the agreement ineffective or obsolete.

DA disaster could occur that would affect both companies.

Show Answer

Question: 3

Data analytics tools and techniques are MOST helpful to an IS auditor during which of the following audit activities?

AAudit follow-up

BWalk-through testing

CSubstantive testing

DAudit and resource planning

Show Answer

Question: 4

During a review, an IS auditor notes that an organization's marketing department has purchased a cloud-based software application without following the procurement process. What should the auditor do FIRST?

APerform a risk analysis.

BEscalate to senior management.

CReview the procurement process.

DReview the business impact analysis (BIA).

Show Answer

Question: 5

Which of the following is the BEST solution to minimize risk from security flaws introduced by developers using open source libraries?

ADynamic application security testing tools

BSecurity business impact analysis (BIA)

CChecks of dependencies between code libraries

DTechnical documentation review policies

Show Answer

Isaca CISA Quiz:562 Topic:5 Questions:2806-2810