Isaca CISA Quiz 292 Topic 8 Questions 1456-1460

Question: 1

.What process allows IS management to determine whether the activities of the organization differ from the planned or expected levels? Choose the BEST answer.

ABusiness impact assessment

BRisk assessment

CIS assessment methods

DKey performance indicators (KPIs)

Show Answer

Question: 2

.When should reviewing an audit client's business plan be performed relative to reviewing an organization's IT strategic plan?

AReviewing an audit client's business plan should be performed before reviewing an organization's IT strategic plan.

BReviewing an audit client's business plan should be performed after reviewing an organization's IT strategic plan.

CReviewing an audit client's business plan should be performed during the review of an organization's IT strategic plan.

DReviewing an audit client's business plan should be performed without regard to an organization's IT strategic plan.

Show Answer

Question: 3

.Allowing application programmers to directly patch or change code in production programs increases risk of fraud. True or false?

ATrue

BFalse

Show Answer

Question: 4

.Who should be responsible for network security operations?

ABusiness unit managers

BSecurity administrators

CNetwork administrators

DIS auditors

Show Answer

Question: 5

.Proper segregation of duties does not prohibit a quality control administrator from also being responsible for change control and problem management. True or false?

ATrue

BFalse

Show Answer

Isaca CISA Quiz:292 Topic:8 Questions:1456-1460