CISA : Certified Information Systems Auditor : Part 56

Last Updated on December 13, 2021 by Admin 3

CISA : Certified Information Systems Auditor : Part 56

CISA : Certified Information Systems Auditor : All Parts
CISA Part 01 CISA Part 11 CISA Part 21 CISA Part 31
CISA Part 02 CISA Part 12 CISA Part 22 CISA Part 32
CISA Part 03 CISA Part 13 CISA Part 23 CISA Part 33
CISA Part 04 CISA Part 14 CISA Part 24 CISA Part 34
CISA Part 05 CISA Part 15 CISA Part 25 CISA Part 35
CISA Part 06 CISA Part 16 CISA Part 26 CISA Part 36
CISA Part 07 CISA Part 17 CISA Part 27 CISA Part 37
CISA Part 08 CISA Part 18 CISA Part 28 CISA Part 38
CISA Part 09 CISA Part 19 CISA Part 29 CISA Part 39
CISA Part 10 CISA Part 20 CISA Part 30 CISA Part 40
CISA : Certified Information Systems Auditor : All Parts
CISA Part 41 CISA Part 51 CISA Part 61 CISA Part 71
CISA Part 42 CISA Part 52 CISA Part 62 CISA Part 72
CISA Part 43 CISA Part 53 CISA Part 63 CISA Part 73
CISA Part 44 CISA Part 54 CISA Part 64 CISA Part 74
CISA Part 45 CISA Part 55 CISA Part 65 CISA Part 75
CISA Part 46 CISA Part 56 CISA Part 66 CISA Part 76
CISA Part 47 CISA Part 57 CISA Part 67 CISA Part 77
CISA Part 48 CISA Part 58 CISA Part 68 CISA Part 78
CISA Part 49 CISA Part 59 CISA Part 69 CISA Part 79
CISA Part 50 CISA Part 60 CISA Part 70 CISA Part 80
CISA : Certified Information Systems Auditor : All Parts
CISA Part 81 CISA Part 91 CISA Part 101 CISA Part 111
CISA Part 82 CISA Part 92 CISA Part 102 CISA Part 112
CISA Part 83 CISA Part 93 CISA Part 103 CISA Part 113
CISA Part 84 CISA Part 94 CISA Part 104 CISA Part 114
CISA Part 85 CISA Part 95 CISA Part 105 CISA Part 115
CISA Part 86 CISA Part 96 CISA Part 106 CISA Part 116
CISA Part 87 CISA Part 97 CISA Part 107 CISA Part 117
CISA Part 88 CISA Part 98 CISA Part 108 CISA Part 118
CISA Part 89 CISA Part 99 CISA Part 109 CISA Part 119
CISA Part 90 CISA Part 100 CISA Part 110 CISA Part 120
CISA : Certified Information Systems Auditor : All Parts
CISA Part 121 CISA Part 131 CISA Part 141 CISA Part 151
CISA Part 122 CISA Part 132 CISA Part 142 CISA Part 152
CISA Part 123 CISA Part 133 CISA Part 143 CISA Part 153
CISA Part 124 CISA Part 134 CISA Part 144 CISA Part 154
CISA Part 125 CISA Part 135 CISA Part 145 CISA Part 155
CISA Part 126 CISA Part 136 CISA Part 146 CISA Part 156
CISA Part 127 CISA Part 137 CISA Part 147 CISA Part 157
CISA Part 128 CISA Part 138 CISA Part 148 CISA Part 158
CISA Part 129 CISA Part 139 CISA Part 149 CISA Part 159
CISA Part 130 CISA Part 140 CISA Part 150 CISA Part 160
CISA : Certified Information Systems Auditor : All Parts
CISA Part 161 CISA Part 164 CISA Part 167 CISA Part 170
CISA Part 162 CISA Part 165 CISA Part 168 CISA Part 171
CISA Part 163 CISA Part 166 CISA Part 169 CISA Part 172

  1. Implementing which of the following would BEST address issues relating to the aging of IT systems?

    • IT project management
    • Release management
    • Application portfolio management
    • Configuration management

  2. The MOST efficient way to confirm that an ERP system being implemented satisfies business expectations is to utilize which of the following types of testing?

    • Parallel
    • Pilot
    • Sociability
    • Alpha

  3. An organization has implemented a distributed security administration system to replace the previous centralized one. The IS auditor’s GREATEST concern should be that:

    • security procedures may be inadequate to support the change.
    • end-user acceptance of the new system is likely to be difficult to obtain.
    • the new system will require additional training.
    • a distributed security system is inherently a weak security system.

  4. Which of the following is the BEST indication of the completeness of interface control documents used for the development of a new application?

    • All documents have been reviewed by end users.
    • All inputs and outputs for potential actions are included.
    • Failed interface data transfers prevent subsequent processes.
    • Both successful and failed interface data transfers are recorded.

  5. An IS auditor identified hard-coded credentials within the source code of recently developed software when evaluating its readiness for implementation. Which of the following would be the auditor’s BEST recommendation?

    • Ensure source code reviews and debugging are performed and documented.
    • Ensure revisions of source code can be tracked and rollback can be performed.
    • Ensure documented evidence of source code being kept in escrow is retained.
    • Ensure log reports are retained of all persons updating software source code.

  6. Assurance tasks required to support security accreditation/certification should be identified:

    • during the project planning stage.
    • after necessary modifications are completed.
    • during the user acceptance phase.
    • after the quality-assurance plan development.

  7. During an audit in a small organization, an IS auditor finds that some developers have access to migrate changes to the production environment. Which of the following should the auditor do NEXT?

    • Review change logs for segregation of duties.
    • Verify whether compensating controls exist.
    • Advise immediate removal of developer access to production.
    • Review the information security policy.

  8. What is the PRIMARY reason for conducting a risk assessment when developing an annual IS audit plan?

    • Identify and prioritize audit areas
    • Determine the existence of controls in audit areas
    • Provide assurance material items will be covered
    • Decide which audit procedures and techniques to use

  9. An IS auditor is preparing a data set for a data analytics project. The data will be used to benchmark a new computer-assisted audit technique (CAAT) tool being developed. Which of the following will help to ensure the data cannot be identified?

    • Data masking
    • Encryption
    • Anonymization
    • Data redaction

  10. Which of the following is MOST important to have in place before developing a disaster recovery plan (DRP)?

    • A duplicate processing facility
    • Defined acceptable downtime
    • Appropriate insurance coverage
    • System restoration procedures

  11. Which of the following should be of MOST concern to an IS auditor reviewing the information systems acquisition, development, and implementation process?

    • Data owners are not trained on the use of data conversion tools.
    • There is no process for post-implementation approval of emergency changes.
    • System deployment is routinely performed by contractors.
    • There is no system documentation available for review.

  12. During which process is regression testing MOST commonly used?

    • Stress testing
    • Program development
    • System modification
    • Unit testing

  13. A startup company is considering the use of a cloud service provider to obtain additional computing power needed for software development and testing. Which of the following service models is MOST appropriate in this situation?

    • Database as a Service (DBaaS)
    • Software as a Service (SaaS)
    • Storage as a Service (STaaS)
    • Platform as a Service (PaaS)

  14. An organization is planning to develop a system using rapid application development (RAD) in order to meet quick turnaround times. Which of the following is the GREATEST potential risk associated with this type of application development?

    • Users may be unavailable to contribute.
    • Costs could spiral out of control.
    • User requirements may not be met.
    • The project deadline could be delayed.

  15. For an organization that has plans to implement web-based trading, it would be MOST important for an IS auditor to verify the organization’s information security plan includes:

    • security training prior to implementation.
    • security requirements for the new application.
    • attributes for system passwords.
    • the firewall configuration for the web server.

  16. Which of the following risk management activities is MOST important to complete before implementing an enterprise resource planning (ERP) system?

    • Optimize business process designs.
    • Validate compliance with applicable local financial regulations.
    • Define the organization’s control objectives.
    • Appoint an independent risk advisory firm to provide support.

  17. An organization has contracted with a third party to implement and configure a new accounting application. Once the application is implemented, in-house staff will provide all application support and maintenance. Which of the following is MOST important to the success of this initiative?

    • Documenting an implementation plan
    • Establishing a knowledge transfer plan
    • Conducting a post-implementation review
    • Ensuring the third party completed testing

  18. When participating as a member of a system development team, the IS auditor should be aware that:

    • as a control specialist, the auditor can provide significant value to the project team by making the final decision on specific controls.
    • the auditor’s ability to perform an independent evaluation of the application after implementation will be impaired.
    • for ongoing evaluation capability, the auditor should ensure that computer audit software is implemented in all applications.
    • the auditor should sign a statement of independence prior to participating in the project team.

  19. Who is PRIMARILY responsible for data integrity and security when implementing a new application?

    • Application end users
    • Project manager
    • Data custodian
    • Data owner

  20. Which of the following would MOST likely lead an organization to consider implementing an IT quality assurance (QA) program?

    • Decrease in stakeholder satisfaction with IT projects
    • Increase in the use of non-standard IT infrastructure
    • Increase in cyber intrusions across the organization
    • Overspend of IT budgets in various IT projects
CISA : Certified Information Systems Auditor : All Parts
CISA Part 01 CISA Part 11 CISA Part 21 CISA Part 31
CISA Part 02 CISA Part 12 CISA Part 22 CISA Part 32
CISA Part 03 CISA Part 13 CISA Part 23 CISA Part 33
CISA Part 04 CISA Part 14 CISA Part 24 CISA Part 34
CISA Part 05 CISA Part 15 CISA Part 25 CISA Part 35
CISA Part 06 CISA Part 16 CISA Part 26 CISA Part 36
CISA Part 07 CISA Part 17 CISA Part 27 CISA Part 37
CISA Part 08 CISA Part 18 CISA Part 28 CISA Part 38
CISA Part 09 CISA Part 19 CISA Part 29 CISA Part 39
CISA Part 10 CISA Part 20 CISA Part 30 CISA Part 40
CISA : Certified Information Systems Auditor : All Parts
CISA Part 41 CISA Part 51 CISA Part 61 CISA Part 71
CISA Part 42 CISA Part 52 CISA Part 62 CISA Part 72
CISA Part 43 CISA Part 53 CISA Part 63 CISA Part 73
CISA Part 44 CISA Part 54 CISA Part 64 CISA Part 74
CISA Part 45 CISA Part 55 CISA Part 65 CISA Part 75
CISA Part 46 CISA Part 56 CISA Part 66 CISA Part 76
CISA Part 47 CISA Part 57 CISA Part 67 CISA Part 77
CISA Part 48 CISA Part 58 CISA Part 68 CISA Part 78
CISA Part 49 CISA Part 59 CISA Part 69 CISA Part 79
CISA Part 50 CISA Part 60 CISA Part 70 CISA Part 80
CISA : Certified Information Systems Auditor : All Parts
CISA Part 81 CISA Part 91 CISA Part 101 CISA Part 111
CISA Part 82 CISA Part 92 CISA Part 102 CISA Part 112
CISA Part 83 CISA Part 93 CISA Part 103 CISA Part 113
CISA Part 84 CISA Part 94 CISA Part 104 CISA Part 114
CISA Part 85 CISA Part 95 CISA Part 105 CISA Part 115
CISA Part 86 CISA Part 96 CISA Part 106 CISA Part 116
CISA Part 87 CISA Part 97 CISA Part 107 CISA Part 117
CISA Part 88 CISA Part 98 CISA Part 108 CISA Part 118
CISA Part 89 CISA Part 99 CISA Part 109 CISA Part 119
CISA Part 90 CISA Part 100 CISA Part 110 CISA Part 120
CISA : Certified Information Systems Auditor : All Parts
CISA Part 121 CISA Part 131 CISA Part 141 CISA Part 151
CISA Part 122 CISA Part 132 CISA Part 142 CISA Part 152
CISA Part 123 CISA Part 133 CISA Part 143 CISA Part 153
CISA Part 124 CISA Part 134 CISA Part 144 CISA Part 154
CISA Part 125 CISA Part 135 CISA Part 145 CISA Part 155
CISA Part 126 CISA Part 136 CISA Part 146 CISA Part 156
CISA Part 127 CISA Part 137 CISA Part 147 CISA Part 157
CISA Part 128 CISA Part 138 CISA Part 148 CISA Part 158
CISA Part 129 CISA Part 139 CISA Part 149 CISA Part 159
CISA Part 130 CISA Part 140 CISA Part 150 CISA Part 160
CISA : Certified Information Systems Auditor : All Parts
CISA Part 161 CISA Part 164 CISA Part 167 CISA Part 170
CISA Part 162 CISA Part 165 CISA Part 168 CISA Part 171
CISA Part 163 CISA Part 166 CISA Part 169 CISA Part 172