Isaca CISA Quiz 15 Topic 6 Questions 71-75

Question: 1

in a small IT web development company where developers must have write access to production the BEST recommendation of an IS auditor would be to

Aremove production access from the developers

Bhire another person to perform migration to production

Cperform a user access review for the development team

Dimplement continuous monitoring controls

Show Answer

Question: 2

Which of the following is the PRIMARY basis on which audit objectives are established?

AConsideration of risks

BBusiness strategy

CAudit risk

DAssessment of prior audits

Show Answer

Question: 3

An IS audit of notes that IT and the business have different opinions on the availability of their application servers. Which of the following should the IS audit a review FIRST m order 10 understand the problem'

AThe exact definition of the service levels and their measurement

BThe regular performance-reporting documentation

CThe actual availability of the servers as part of a substantive test

DThe alerting and measurement process on the application servers

Show Answer

Question: 4

An IS auditor who was instrumental m designing an application is called upon to review the application. The auditor should:

Ainto in audit management of the earlier involvement

Buse the knowledge of the application to carry out the audit

Cmodify the scope of the audit

Drefuse the assignment to avoid conflict of interest

Show Answer

Question: 5

A small startup organization does not have the resources to implement segregation of duties. Which of the following is the MOST effective compensating control?

AMandatory vacations

BAdditional management reviews and reconciliations

CRotation of log monitoring and analysis responsibilities

DThird-party assessments

Show Answer

Isaca CISA Quiz:15 Topic:6 Questions:71-75