CISA practice questions 201–210

1. Question 201 · 1459 in bank

   What is the BEST way to reduce the risk of inaccurate or misleading data proliferating through business intelligence systems?

   • ADevelop a metadata repository to store and access metadata.
   • BImplement data entry controls for new and existing applications.
   • CImplement a consistent database indexing strategy.
   • DEstablish rules for converting data from one format to another.

   Show answer

   Answer: B

   Explanation

   B. Implement data entry controls for new and existing applications. Data entry controls ensure that the data entered into the system is accurate, complete, and valid. This is crucial because the quality of the output from business intelligence systems is heavily dependent on the quality of the input data.

   Source: Adapted from community discussion — MJORGER

   Next question

2. Question 202 · 1459 in bank

   As part of the architecture of virtualized environments, in a bare metal or native virtualization the hypervisor runs without:

   • Aany applications on the guest operating system.
   • Ba guest operating system.
   • Cany applications on the host operating system.
   • Da host operating system.

   Show answer

   Answer: D

   Explanation

   The answer is: D. a host operating system. In a bare metal or native virtualization, the hypervisor runs directly on the hardware of the host machine without the need for a host operating system. This type of hypervisor interacts directly with the physical server's resources and manages the guest operating systems. Examples of bare metal hypervisors include VMware's ESXi and Microsoft's Hyper-V.

   Source: Adapted from community discussion — cybervds

   Next question

3. Question 203 · 1459 in bank

   An e-commerce company wants to ensure customers can update payment information securely through their phones. On which servers should Transport Layer Security (TLS) certificates be installed?

   • AProxy servers
   • BWeb servers
   • CDatabase servers
   • DApplication servers

   Show answer

   Answer: B

   Explanation

   TLS (Transport Layer Security) certificates should primarily be installed on web servers (option B) when it comes to securing communication between the customer's phones and the e-commerce company's website. TLS encrypts the data exchanged between the user's device (in this case, the phone) and the web server, ensuring that sensitive information like payment details is transmitted securely over the internet. While TLS termination might happen at a proxy server in some configurations for performance reasons, the primary location for installing TLS certificates to secure communication with customers' phones is on the web servers that handle the customer-facing web application.

   Source: Adapted from community discussion — SuperMax

   Next question

4. Question 204 · 1459 in bank

   Which of the following is the BEST indication that a software development project is on track to meet its completion deadline?

   • AIssues identified during user acceptance testing (UAT) have been addressed prior to the original implementation date.
   • BTechnical specifications and development requirements have been agreed upon and formally recorded.
   • CProject plan due dates have been documented for each phase of the software development life cycle.
   • DThe planned software go-live date has been communicated in advance to end users and stakeholders.

   Show answer

   Answer: A

   Next question

5. Question 205 · 1459 in bank

   An IS auditor has identified potential fraud activity perpetrated by the network administrator. What should the auditor do FIRST?

   • AReview the audit finding with the audit committee prior to any other discussions.
   • BShare the potential audit finding with the security administrator.
   • CPerform more detailed tests prior to disclosing the audit results.
   • DNotify the audit committee to ensure a timely resolution.

   Show answer

   Answer: C

   Explanation

   When an IS auditor identifies potential fraud activity, the first step should be to perform more detailed tests to gather additional evidence and validate the findings. It is crucial to ensure the accuracy and completeness of the audit findings before taking further actions. Performing additional tests before disclosing audit results helps ensure that the auditor has a comprehensive and accurate understanding of the situation, allowing for more informed communication with relevant stakeholders. This approach strengthens the credibility of the audit findings and supports a more effective and timely resolution.

   Source: Adapted from community discussion — FAGFUR

   Next question

6. Question 206 · 1459 in bank

   Which of the following is the MOST effective accuracy control for entry of a valid numeric part number?

   • AComparison to historical order pattern
   • BHash totals
   • COnline review of description
   • DSelf-checking digit

   Show answer

   Answer: D

   Next question

7. Question 207 · 1459 in bank

   Which of the following is MOST important to ensuring the IT governance function can fulfill its responsibilities?

   • AIT governance has created a roadmap for realizing business gains.
   • BIT governance takes leadership on control cost reduction.
   • CIT governance ensures that IT strategies are openly shared across the organization.
   • DIT governance remains independent from production processes.

   Show answer

   Answer: A

   Explanation

   In the context of IT governance as per ISACA (the organization that offers the CISA certification), ensuring independence from production processes is a key principle. IT governance should provide oversight, direction and control, and should not be directly involved in operational or production activities. This independence allows IT governance to objectively evaluate the effectiveness and efficiency of IT processes, manage risks, and ensure alignment with business objectives. Although sharing IT strategies and creating a roadmap for business gains are also important, independence from production processes is a more fundamental requirement for effective IT governance according to ISACA's framework. Therefore, the answer D is more suitable when considering the CISA exam materials.

   Source: Adapted from community discussion — cybervds

   Next question

8. Question 208 · 1459 in bank

   Which of the following would be an auditor's GREATEST concern when reviewing data inputs from spreadsheets into the core finance system?

   • ASpreadsheets are accessible by all members of the finance department.
   • BUndocumented code formats data and transmits directly to the database.
   • CThere is not a complete inventory of spreadsheets, and file naming is inconsistent.
   • DThe department data protection policy has not been reviewed or updated for two years.

   Show answer

   Answer: B

   Explanation

   The greatest concern when reviewing data inputs from spreadsheets into the core finance system is that undocumented code formats data and transmits directly to the database. This raises significant risks related to data accuracy, integrity, and the potential for unauthorized or unintended modifications to the core finance system. Undocumented code that formats data and transmits directly to the database poses a significant risk of errors, manipulation, and potential data corruption. It is crucial for auditors to ensure proper documentation, controls, and oversight are in place to mitigate these risks.

   Source: Adapted from community discussion — FAGFUR

   Next question

9. Question 209 · 1459 in bank

   Which of the following is the BEST way to mitigate the risk associated with technology obsolescence?

   • ACreate tactical and strategic IS plans.
   • BMake provisions in the budgets for potential upgrades.
   • CInvest in current technology.
   • DCreate a technology watch team that evaluates emerging trends.

   Show answer

   Answer: A

   Next question

10. Question 210 · 1459 in bank

    An IT strategic plan that BEST leverages IT in achieving organizational goals will include:

    • Aenterprise architecture (EA) impacts.
    • Ba risk-based ranking of projects.
    • CIT budgets linked to the organization's budget.
    • Da comparison of future needs against current capabilities.

    Show answer

    Answer: A

    Explanation

    However, option A, "enterprise architecture (EA) impacts," encompasses a broader perspective. Enterprise architecture provides a structured approach to aligning IT strategy with business strategy, considering not only current and future needs but also the overall structure, processes, and systems that support the organization's goals. It provides a comprehensive framework for optimizing IT investments and ensuring they contribute to organizational success.

    Source: Adapted from community discussion — KAP2HURUF

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 201. 1459 questions available.