Isaca CISA Quiz 600 Topic 7 Questions 2996-3000

Question: 1

An IS audit reveals an organization's IT department reports any deviations from its security standards to an internal IT risk committee involving IT senior management. Which of the following should be the IS auditor's GREATEST concern?

AThe list of IT risk committee members does not include the board member responsible for IT.

BThe IT risk committee has no reporting line to any governance committee outside IT.

CThe IT risk committee meeting minutes are not signed off by all participants.

DThe chief information officer (CIO) did not attend a number of IT risk committee meetings during the past year.

Show Answer

Question: 2

An IS audit manager has been asked to perform a quality review on an audit that the same manager also supervised. Which of the following is (he manager's BEST response to this situation?

ADiscuss with the audit team to understand how conclusions were reached.

BDetermine whether audit evidence supports audit conclusions.

CEscalate the situation to senior audit leadership.

DNotify the audit committee of the situation.

Show Answer

Question: 3

Which of the following would an IS auditor PRIMARILY review to understand key drivers of a project?

AEarned value analysis (EVA)

BProject risk matrix

CIT strategy and objectives

DBusiness case

Show Answer

Question: 4

An IS auditor is reviewing the key payroll interface that collects wage rates from various business applications to process payroll. Which of the following is MOST likely to cause errors in payroll processing?

AUser acceptance testing (UAT) has not been properly documented for all changes.

BData conversion procedures did not include all business applications and interfaces.

CThe payroll processing application does not follow a regularly scheduled patching cycle.

DChanges to the interface configuration settings were not adequately tested and approved.

Show Answer

Question: 5

During an audit of a data classification policy, an IS auditor finds that many documents are inappropriately classified as confidential. Which of the following is the GREATEST concern?

AInformation may be underprotected.

BData integrity issues may occur.

CIndustry security best practices are violated.

DInformation may generally be overprotected.

Show Answer

Isaca CISA Quiz:600 Topic:7 Questions:2996-3000