Isaca CISA Quiz 490 Topic 8 Questions 2446-2450

Question: 1

Which type of risk has materialized when an internal IS auditor discovers an issue that external auditors missed due to improperly applied audit procedures?

ADetection risk

BInherent risk

CSampling risk

DControl risk

Show Answer

Question: 2

During an annual audit an IS auditor finds there is no written department and users The auditor's FIRST step should be to:

Arecommend drafting a service level agreement (SLA)

Bdetermine the Impact of the issue

Creport the issue to senior management

Ddocument the issue in the final report

Show Answer

Question: 3

Which of the following is the MOST important consideration tor an IS auditor when reviewing a vendor selection process?

ASecurity and regulatory concerns were identified as part of the selection process

BThe lowest price possible was obtained for vendor services rendered

CResponsible managers were assigned to monitor vendor performance

DVendors were assessed and assigned a ranking during the selection process

Show Answer

Question: 4

An IS auditor has been asked to review plans for an organization's new mobile device program to identify associated risks. Which of the following recommendations would BEST reduce risks associated with the program?

ADevelop and conduct mobile device security awareness training

BEstablish and enforce mobile device security policies

CConfigure all mobile devices to industry best practices

DRequire strong password controls

Show Answer

Question: 5

In a database management system (DBMS) normalization is used to:

Astandardize data names

Breduce data redundancy

Celiminate processing deadlocks

Dreduce access time

Show Answer

Isaca CISA Quiz:490 Topic:8 Questions:2446-2450