Isaca CISA Quiz 44 Topic 7 Questions 216-220

Question: 1

A bank's web-hosting provider has just completed an internal IT security audit and provides only a summary of the findings to the bank's auditor. Which of the following should be the bank's GREATEST concern?

AThe bank's auditors are not independent of the service provider.

BThe audit may be duplicative of the bank's internal audit procedures.

CThe audit procedures are not provided to the bank.

DThe audit scope may not have addressed critical areas.

Show Answer

Question: 2

What is the MOST difficult aspect of access control in a multiplatform, multiple-site client/server environment?

ARestricting a local user to necessary resources on a local platform

BMaintaining consistency throughout all platforms

CRestricting a local user to necessary resources on the host server

DCreating new user IDs valid only on a few hosts

Show Answer

Question: 3

Which of the following should be of GREATEST concern to an IS auditor reviewing project documentation for a client relationship management (CRM) system migration project?

AEmployees are concerned that data representation in the new system is completely different from the old system.

BFive weeks prior to the target date, there are still numerous defects in the printing functionality.

CA single implementation phase is planned and the legacy system will be immediately decommissioned.

DThe technical migration is planned for a holiday weekend and end users may not be available.

Show Answer

Question: 4

An IS auditor is assigned to review the IS departments quality procedures Upon contacting the IS manager, the auditor finds that there is an informal unwritten set of standards Which of the following should be the auditor's NEXT action?

AFinalize the audit and report the finding

BPostpone the audit until IS management implements written standards

CMake recommendations to IS management as to appropriate quality standards

DDocument and test compliance with the informal standards

Show Answer

Question: 5

Which of the following is MOST important for an IS auditor to consider when planning an assessment of the organization's end-user computing (EUC) program?

AThe integrity of data processed by end user tools

BThe inclusion of end user tools in the IT balanced scorecard

CThe training program curriculum for key end users

DIdentification of IT owners for each end user tool

Show Answer

Isaca CISA Quiz:44 Topic:7 Questions:216-220