Isaca CISA Quiz 43 Topic 8 Questions 211-215

Question: 1

To lest the integrity of the data in the accounts receivable master file, an IS auditor is particularly interested in reviewing customers with balances over $400,000. The selection technique the IS auditor would use to obtain such a sample is called:

Avariable sampling

Bstop-or-go sampling

Crandom selection

Dstratification.

Show Answer

Question: 2

Which of the following should be of GREATEST concern to an IS auditor performing a review of information security controls?

AThe information security policy does not include mobile device provisions.

BThe information security policy has not been approved by the chief audit executive (CAE).

CThe information security policy has not been approved by the policy owner.

DThe information security policy is not frequently reviewed.

Show Answer

Question: 3

Stress testing should ideally be carried out under a:

Aproduction environment with test data.

Btest environment with test data.

Cproduction environment with production workloads.

Dtest environment with production workloads.

Show Answer

Question: 4

When conducting a post-implementation review of a new software application, an IS auditor should be MOST concerned with an increasing number of

Aupdates required for the end-user operations manual

Bchange requests approved to add new services

Coperational errors impacting service delivery

Dhelp desk calls requesting future enhancements

Show Answer

Question: 5

Which of the following is the BEST indication of the completeness of interface control documents used for the development of a new application?

AAll documents have been reviewed by end users.

BAll inputs and outputs for potential actions are included.

CBoth successful and failed interface data transfers are recorded.

DFailed interface data transfers prevent subsequent processes.

Show Answer

Isaca CISA Quiz:43 Topic:8 Questions:211-215