Isaca CISA Quiz 245 Topic 9 Questions 1221-1225

Question: 1

In the context of effective information security governance, the primary objective of value delivery is to:

Aoptimize security investments in support of business objectives.

Bimplement a standard set of security practices.

Cinstitute a standards-based solution.

Dimplement a continuous improvement culture.

Show Answer

Question: 2

Which of the following BEST supports the prioritization of new IT projects?

AInternal control self-assessment (CSA)

BInformation systems audit

CInvestment portfolio analysis

DBusiness risk assessment

Show Answer

Question: 3

After the merger of two organizations, multiple self-developed legacy applications from both companies are to be replaced by a new common platform. Which of the following would be the GREATEST risk?

AProject management and progress reporting is combined in a project management office which is driven by external consultants.

BThe replacement effort consists of several independent projects without integrating the resource allocation in a portfolio management approach.

CThe resources of each of the organizations are inefficiently allocated while they are being familiarized with the other company's legacy systems.

DThe new platform will force the business areas of both organizations to change their work processes, which will result in extensive training needs.

Show Answer

Question: 4

Which of the following is the MOST important function to be performed by IS management when a service has been outsourced?

AEnsuring that invoices are paid to the provider

BParticipating in systems design with the provider

CRenegotiating the provider's fees

DMonitoring the outsourcing provider's performance

Show Answer

Question: 5

Is it appropriate for an IS auditor from a company that is considering outsourcing its IS processing to request and review a copy of each vendor's business continuity plan?

AYes, because an IS auditor will evaluate the adequacy of the service bureau's plan and assist their company in implementing a complementary plan.

BYes, because based on the plan, an IS auditor will evaluate the financial stability of the service bureau and its ability to fulfill the contract.

CNo, because the backup to be provided should be specified adequately in the contract.

DNo, because the service bureau's business continuity plan is proprietary information.

Show Answer

Isaca CISA Quiz:245 Topic:9 Questions:1221-1225