Isaca CISA Quiz 251 Topic 6 Questions 1251-1255

Question: 1

To aid management in achieving IT and business alignment, an IS auditor should recommend the use of:

Acontrol self-assessments.

Ba business impact analysis.

Can IT balanced scorecard.

Dbusiness process reengineering.

Show Answer

Question: 2

When reviewing the IT strategic planning process, an IS auditor should ensure that the plan:

Aincorporates state of the art technology.

Baddresses the required operational controls.

Carticulates the IT mission and vision.

Dspecifies project management practices.

Show Answer

Question: 3

When developing a formal enterprise security program, the MOST critical success factor (CSF) would be the:

Aestablishment of a review board.

Bcreation of a security unit.

Ceffective support of an executive sponsor.

Dselection of a security process owner.

Show Answer

Question: 4

When reviewing an organization's strategic IT plan an IS auditor should expect to find:

Aan assessment of the fit of the organization's application portfolio with business objectives.

Bactions to reduce hardware procurement cost.

Ca listing of approved suppliers of IT contract resources.

Da description of the technical architecture for the organization's network perimeter security.

Show Answer

Question: 5

The advantage of a bottom-up approach to the development of organizational policies is that the policies:

Aare developed for the organization as a whole.

Bare more likely to be derived as a result of a risk assessment.

Cwill not conflict with overall corporate policy.

Densure consistency across the organization.

Show Answer

Isaca CISA Quiz:251 Topic:6 Questions:1251-1255