CISA practice questions 121–130

1. Question 121 · 1459 in bank

   Transaction records from a business database were inadvertently deleted, and system operators decided to restore from a snapshot copy. Which of the following provides the BEST assurance that the transactions were recovered successfully?

   • ARecount the transaction records to ensure no records are missing.
   • BCompare transaction values against external statements to verify accuracy.
   • CRerun the process on a backup machine to verify the results are the same.
   • DReview transaction recovery logs to ensure no errors were recorded.

   Show answer

   Answer: D

   Explanation

   Transaction recovery logs typically provide a detailed record of the recovery process, including any errors or issues encountered during the restoration. By reviewing these logs, one can ensure that the recovery process was completed without errors and that all transactions were successfully restored.

   Source: Adapted from community discussion — FAGFUR

   Next question

2. Question 122 · 1459 in bank

   Which of the following will BEST ensure that a proper cutoff has been established to reinstate transactions and records to their condition just prior to a computer system failure?

   • ARotating backup copies of transaction files offsite
   • BEnsuring bisynchronous capabilities on all transmission lines
   • CMaintaining system console logs in electronic format
   • DUsing a database management system (DBMS) to dynamically back-out partially processed transactions

   Show answer

   Answer: D

   Explanation

   Using a DBMS to dynamically back-out partially processed transactions allows for the rollback of transactions that were only partially completed before the system failure. It ensures that the data remains consistent and eliminates any incomplete or inconsistent data that may have been created during the system failure.

   Source: Adapted from community discussion — TTH1019

   Next question

3. Question 123 · 1459 in bank

   Which of the following is the BEST method to delete sensitive information from storage media that will be reused?

   • ARe-partitioning
   • BCrypto-shredding
   • CReformatting
   • DMultiple overwriting

   Show answer

   Answer: D

   Explanation

   option D - Multiple overwriting. Multiple overwriting involves writing random data to the storage media multiple times, effectively destroying any previously stored data. This method is highly effective in ensuring that sensitive information cannot be recovered from the storage media. Re-partitioning (option A) and reformatting (option C) involve deleting the file system information and/or the partition table, but may leave some data fragments intact and could potentially be recovered using advanced recovery techniques. Crypto-shredding (option B) involves encrypting the storage media and then deleting the encryption key, making the data unreadable. While this method can be effective, it requires the use of strong encryption and proper key management to ensure that the data cannot be recovered.

   Source: Adapted from community discussion — Aly

   Next question

4. Question 124 · 1459 in bank

   An IS auditor is reviewing how password resets are performed for users working remotely. Which type of documentation should be requested to understand the detailed steps required for this, activity?

   • AProcedures
   • BPolicies
   • CStandards
   • DGuidelines

   Show answer

   Answer: A

   Explanation

   When reviewing how password resets are performed for users working remotely, an IS auditor should request documentation that provides detailed steps and instructions for the process. This type of documentation is typically captured in procedures.

   Source: Adapted from community discussion — FAGFUR

   Next question

5. Question 125 · 1459 in bank

   Internal audit is evaluating an organization's IT portfolio management. Which of the following would be the BEST recommendation for prioritizing the funding of IT projects?

   • ADirect funds toward projects that reduce the organization's technology risk exposure.
   • BGroup projects into portfolios based on their potential to increase market share and reduce costs.
   • CDirect funds toward projects that increase the availability of the organization's technology infrastructure.
   • DGroup projects with common themes into portfolios and assess them against strategic objectives.

   Show answer

   Answer: D

   Explanation

   This approach involves categorizing projects with common goals or themes into portfolios and then evaluating them based on how well they align with the organization's strategic objectives. It allows for a structured and strategic approach to project prioritization, ensuring that the organization's limited resources are allocated to projects that contribute most effectively to its overall goals and objectives.

   Source: Adapted from community discussion — FAGFUR

   Next question

6. Question 126 · 1459 in bank

   Which of the following is MOST important for an IS auditor to validate when auditing network device management?

   • ADevices cannot be accessed through service accounts.
   • BBackup policies include device configuration files.
   • CAll devices are located within a protected network segment.
   • DAll devices have current security patches assessed.

   Show answer

   Answer: D

   Explanation

   Ensuring that network devices have up-to-date security patches is crucial for mitigating vulnerabilities and maintaining a secure network infrastructure. Regular assessment and application of security patches help protect against known vulnerabilities and potential exploits that could compromise the security of the network.

   Source: Adapted from community discussion — FAGFUR

   Next question

7. Question 127 · 1459 in bank

   A programmer has made unauthorized changes to key fields in a payroll system report. Which of the following control weaknesses would have contributed MOST to this problem?

   • AThe programmer has access to the production programs.
   • BThe user requirements were not documented.
   • CPayroll files were not under the control of a librarian.
   • DThe programmer did not involve the user in testing.

   Show answer

   Answer: A

   Next question

8. Question 128 · 1459 in bank

   information officer (CIO) has requested there be no IS audits in the upcoming year, as more time is needed to address a large number of recommendations from the previous year. Which of the following should the auditor do FIRST?

   • ANotify the chief operating officer (COO) and discuss the audit plan risks.
   • BEscalate to audit management to discuss the audit plan.
   • CIncrease the number of IS audits in the plan.
   • DExclude IS audits from the upcoming year’s plan.

   Show answer

   Answer: B

   Explanation

   Escalating the issue to audit management is important to ensure that appropriate actions are taken. This may involve discussing the concerns with higher levels of management, such as the chief operating officer (COO) or others responsible for governance. It allows for a comprehensive evaluation of the situation and a decision on how to proceed, considering the risks and the organization's needs.

   Source: Adapted from community discussion — FAGFUR

   Next question

9. Question 129 · 1459 in bank

   Which of the following is the MOST important outcome of an information security program?

   • AOperating system weaknesses are more easily identified.
   • BEmerging security technologies are better understood and accepted.
   • CThe cost to mitigate information security risk is reduced.
   • DOrganizational awareness of security responsibilities is improved.

   Show answer

   Answer: D

   Next question

10. Question 130 · 1459 in bank

    Which of the following concerns is MOST effectively addressed by implementing an IT framework for alignment between IT and business objectives?

    • ALack of a benchmark analysis
    • BInadequate IT portfolio management
    • CInadequate IT change management practices
    • DInaccurate business impact analysis (BIA)

    Show answer

    Answer: B

    Explanation

    An IT framework helps establish a structured approach to managing IT assets, projects, and initiatives in alignment with business goals. IT portfolio management involves the selection, prioritization, and management of IT projects and investments to ensure they contribute effectively to the organization's overall objectives. By implementing an IT framework, organizations can enhance their ability to align IT activities with business priorities, optimize resource allocation, and improve the overall management of the IT portfolio.

    Source: Adapted from community discussion — FAGFUR

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 121. 1459 questions available.