Isaca CISA Quiz 275 Topic 7 Questions 1371-1375

Question: 1

The decisions and actions of an IS auditor are MOST likely to affect which of the following risks?

AInherent

BDetection

CControl

DBusiness

Show Answer

Question: 2

Overall business risk for a particular threat can be expressed as:

Aa product of the probability and magnitude of the impact if a threat successfully exploits a vulnerability.

Bthe magnitude of the impact should a threat source successfully exploit the vulnerability.

Cthe likelihood of a given threat source exploiting a given vulnerability.

Dthe collective judgment of the risk assessment team.

Show Answer

Question: 3

Which of the following is a substantive test?

AChecking a list of exception reports

BEnsuring approval for parameter changes

CUsing a statistical sample to inventory the tape library

DReviewing password history reports

Show Answer

Question: 4

Which of the following is a benefit of a risk-based approach to audit planning? Audit:

Ascheduling may be performed months in advance.

Bbudgets are more likely to be met by the IS audit staff.

Cstaff will be exposed to a variety of technologies.

Dresources are allocated to the areas of highest concern

Show Answer

Question: 5

An audit charter should:

Abe dynamic and change often to coincide with the changing nature of technology and the audit profession.

Bclearly state audit objectives for, and the delegation of, authority to the maintenance and review of internal controls.

Cdocument the audit procedures designed to achieve the planned audit objectives.

Doutline the overall authority, scope and responsibilities of the audit function.

Show Answer

Isaca CISA Quiz:275 Topic:7 Questions:1371-1375