Isaca CISA Quiz 383 Topic 9 Questions 1911-1915

Question: 1

Inherent risk rating are determined by assessing the impact and likelihood of a threat or vulnerability occurring:

ABefore the risk appetite Is established

BAfter compensating have been applied

CAfter internal controls are taken into account.

DBefore internal controls are taken into account.

Show Answer

Question: 2

During a business process re-engineering (BPR) program, IT can assist with:

Asegregation of duties

Bstreamlining of tasks

Ctotal cost of ownership,

Dfocusing on value-added tasks.

Show Answer

Question: 3

Which of the following BEST describes a common risk in implementing a new application software package?

ASensitivity of transactions is high

BTransaction volume is excessive

CThe application lacks audit trails.

DParameter settings are incorrect

Show Answer

Question: 4

Which of the following is corrective control?

ASeparating equipment development testing and production

BReviewing user access rights for segregation of duties

CVerifying duplicate calculations in data processing

DExecuting emergency response plans

Show Answer

Question: 5

Which of the following is MOST important to include in a contract to outsource data processing that involves customer personally identifiable information (Pit)?

AThe vendor must comply with the organization is legal and regulatory requirement.

BThe vendor must provide an independent report of its data processing facilities.

CThe vendor must compensate the organization if nonperformance occurs.

DThe vendor must sign a nondisclosure agreement with the organization.

Show Answer

Isaca CISA Quiz:383 Topic:9 Questions:1911-1915