Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is the BEST report for an IS auditor to reference when tasked with reviewing the security of code written for a newly developed website?
Answer: B
By using static analysis tools to analyze source code, you can identify problems early in each process of a development project, allowing for quick fixes and reducing the cost of fixing bugs throughout the project.
Source: Adapted from community discussion — Swallows
Which of the following observations should be of MOST concern to an IS auditor reviewing an organization’s business impact analysis (BIA) practices?
Answer: C
The MOST concerning observation for an IS auditor reviewing an organization's business impact analysis (BIA) practices would be: C. Resource dependencies for critical processes are not determined. D. Identifying recovery objectives without conducting risk assessments is a concern, but it's not as critical as failing to determine resource dependencies. Risk assessments help identify potential threats and vulnerabilities, which inform the establishment of recovery objectives. While this is important, understanding resource dependencies is fundamental to the BIA process as it helps identify critical components that must be protected and recovered to ensure business continuity. In summary, option C is the most concerning because it represents a fundamental gap in the BIA process, potentially leading to an inadequate understanding of what resources are critical for the organization's operations and how they might be impacted during a disruption.
Source: Adapted from community discussion — SuperMax
During an audit, which of the following would be MOST helpful in establishing a baseline for measuring data quality?
Answer: C
I think its D. Built-in data error prevention application controls, as they directly address data quality at the source and provide an objective basis for evaluating data accuracy and integrity.
Source: Adapted from community discussion — JONESKA
Which of the following approaches would BEST enable an e-commerce website to handle unpredictable amounts of traffic?
Answer: D
Which of the following BEST facilitates the legal process in the event of an incident?
Answer: B
An organization is permanently transitioning from onsite to fully remote business operations. When should the existing business impact analysis (BIA) be reviewed?
Answer: B
The existing Business Impact Analysis (BIA) should be reviewed when there are significant changes in the business operations, such as a permanent transition from onsite to fully remote operations. In this case, option B, "As soon as the new operating model is in place," is the most appropriate choice. Reviewing the BIA as soon as the new remote operating model is in place will help ensure that the organization's business continuity and disaster recovery plans are aligned with the new way of conducting business. It allows for the identification and assessment of potential risks and impacts associated with the remote work environment, enabling the organization to make necessary adjustments and updates to its continuity strategies and plans.
Source: Adapted from community discussion — SuperMax
Which of the following is a PRIMARY benefit of a maturity model?
Answer: C
In the development of a new financial application, the IS auditor’s FIRST involvement should be in the:
Answer: D
In the development of a new financial application, the IS (Information Systems) auditor's FIRST involvement should typically be in the: D. feasibility study The feasibility study is the initial phase of a project where the auditor can assess whether the proposed financial application is viable and aligns with the organization's goals and objectives. It involves evaluating the technical, operational, economic, legal, and scheduling aspects of the project. The IS auditor's role in this phase is critical to ensure that the project is worth pursuing from a strategic and financial perspective and that it complies with regulatory requirements. Once the feasibility study is completed and the project is deemed feasible, the auditor's involvement can then extend to control design, application design, system testing, and other phases of the project.
Source: Adapted from community discussion — SuperMax
Which of the following tests would BEST indicate that a software development project is ready to be deployed into the production environment?
Answer: D
Which of the following is the MOST important element of quality control with respect to an audit engagement?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 1361. 1459 questions available.
Version 1.0.0. How we source questions