Question 111 · 1459 in bank
Which of the following is a social engineering attack method?
Show answer
Answer: B
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is a social engineering attack method?
Answer: B
A new system development project is running late against a critical implementation deadline. Which of the following is the MOST important activity?
Answer: B
In the context of a new system development project running late against a critical implementation deadline, the most important activity is to perform user acceptance testing (UAT). User acceptance testing is a critical phase in the development process where end-users validate whether the system meets their requirements and expectations. Identifying and addressing any issues during UAT is crucial before the system is implemented, as it helps ensure that the system functions as intended and meets the needs of the users.
Source: Adapted from community discussion — FAGFUR
A finance department has a multi-year project to upgrade the enterprise resource planning (ERP) system hosting the general ledger, and in year one, the system version upgrade will be applied. Which of the following should be the PRIMARY focus of the IS auditor reviewing the first year of the project?
Answer: C
The primary focus of the IS auditor reviewing the first year of the project, where the system version upgrade will be applied, should be on unit testing. Unit testing is a phase of the testing process where individual components or modules of the software are tested in isolation to ensure their correctness and functionality. This is particularly relevant when upgrading the system version to verify that the individual units or components of the ERP system are functioning as expected with the new version.
Source: Adapted from community discussion — FAGFUR
Which of the following provides the MOST useful information to an IS auditor when selecting projects for inclusion in an IT audit plan?
Answer: B
Which type of device sits on the perimeter of a corporate or home network, where it obtains a public IP address and then generates private IP addresses internally?
Answer: D
The device that sits on the perimeter of a corporate or home network, obtains a public IP address, and generates private IP addresses internally is a Router. Routers are networking devices that connect different networks together, such as a local area network (LAN) to the Internet. They typically perform network address translation (NAT), allowing multiple devices within the internal network to share a single public IP address while using private IP addresses internally. This helps manage the flow of traffic between the internal network and the external network, providing security and enabling communication between devices on the local network and the Internet.
Source: Adapted from community discussion — FAGFUR
An IS auditor observes that a large number of departed employees have not been removed from the accounts payable system. Which of the following is MOST important to determine in order to assess the risk?
Answer: A
The question asks to assess the risk of the situation, for which IMO A is the best answer. If accounts are effectively not usable any more, the risk is low.
Source: Adapted from community discussion — marc4354345
Which of the following audit findings should be given the HIGHEST priority?
Answer: C
Periodic reviews of IT key risk indicators (KRIs) are crucial for assessing and managing the organization's IT-related risks. Failure to review KRIs regularly can lead to a lack of awareness and understanding of emerging risks, potentially exposing the organization to vulnerabilities.
Source: Adapted from community discussion — FAGFUR
Which of the following provides the MOST useful information for performing a business impact analysis (BIA)?
Answer: B
A business impact analysis involves assessing the potential impact of disruptions on various business processes. Having an inventory of relevant business processes (Option B) provides the foundational information needed to evaluate the criticality of each process, identify dependencies, and prioritize recovery efforts. Understanding the business processes is essential for determining the potential consequences of disruptions and developing effective continuity plans.
Source: Adapted from community discussion — FAGFUR
When auditing the feasibility study of a system development project, the IS auditor should:
Answer: C
option C is the correct answer. The feasibility study of a system development project is an important phase that helps to determine whether the project is viable and worth pursuing. One key aspect of the feasibility study is the cost-benefit analysis, which assesses the potential benefits of the project against the costs and risks associated with it.
Source: Adapted from community discussion — Aly
Which of the following observations should be of GREATEST concern to an IS auditor when auditing web application security control as part of an IT general controls audit?
Answer: B
The absence of an application control assessment indicates a lack of proactive evaluation and testing of the controls in place to secure the web application. This increases the risk of vulnerabilities and potential exploitation, as there is no systematic review and verification of the effectiveness of security controls.
Source: Adapted from community discussion — FAGFUR
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 111. 1459 questions available.
Version 1.0.0. How we source questions