CISA practice questions 241–250

1. Question 241 · 1459 in bank

   During an audit of payment services of a branch based in a foreign country, a large global bank's audit team identifies an opportunity to use data analytics techniques to identify abnormal payments. Which of the following is the team's MOST important course of action?

   • ARequest the data from the branch as the team audit charter covers the country where it is based.
   • BConduct a walk through of the analytical strategy with stakeholders of the audited branch to obtain their buy-in.
   • CConsult the legal department to understand the procedure for requesting data from a different jurisdiction.
   • DAgree on a data extraction and sharing strategy with the IT team of the audited branch.

   Show answer

   Answer: C

   Next question

2. Question 242 · 1459 in bank

   Which of the following is MOST important to include in a business case for an IT-enabled investment?

   • ABusiness impact analysis (BIA)
   • BSecurity requirements
   • CRisk assessment
   • DCost-benefit analysis

   Show answer

   Answer: D

   Next question

3. Question 243 · 1459 in bank

   Which of the following should be the PRIMARY consideration when designing a backup strategy for an online reservation system that requires high availability?

   • AData classification
   • BScheduled maintenance
   • CRecovery time objective (RTO)
   • DRecovery point objective (RPO)

   Show answer

   Answer: C

   Next question

4. Question 244 · 1459 in bank

   During recent post-implementation reviews, an IS auditor has noted that several deployed applications are not being used by the business. The MOST likely cause would be the lack of:

   • Achange management.
   • BIT portfolio management.
   • CIT resource management.
   • Dsystem support documentation.

   Show answer

   Answer: B

   Next question

5. Question 245 · 1459 in bank

   Which of the following is the PRIMARY way in which data analytics tools increase audit quality and execution efficiencies?

   • AEnabling the evaluation of data within IT systems to allow full population testing
   • BFacilitating access to confidential client data for analysis
   • CProviding a narrowed risk focus for more targeted testing procedures
   • DDetecting certain types of fraud in order to predict future fraud scenarios

   Show answer

   Answer: A

   Next question

6. Question 246 · 1459 in bank

   Which of the following is the BEST way for an IS auditor to assess the design of an automated application control?

   • AInterview the application developer.
   • BObtain management attestation and sign-off.
   • CReview system configuration parameters and output.
   • DReview the application implementation documents.

   Show answer

   Answer: C

   Explanation

   By checking system configuration parameters and outputs, you can be assured that the parameters are set as per the automated design.

   Source: Adapted from community discussion — Swallows

   Next question

7. Question 247 · 1459 in bank

   An IS auditor is evaluating an enterprise resource planning (ERP) migration from local systems to the cloud. Who should be responsible for the data classification in this project?

   • AInformation security officer
   • BData architect
   • CDatabase administrator (DBA)
   • DInformation owner

   Show answer

   Answer: D

   Next question

8. Question 248 · 1459 in bank

   Which of the following would BEST enable an organization to address the security risks associated with a recently implemented bring your own device (BYOD) strategy?

   • AMobile device testing program
   • BMobile device upgrade program
   • CMobile device awareness program
   • DMobile device tracking program

   Show answer

   Answer: C

   Explanation

   can t bear the stype of this CISA questions. this results in confusion, i hope i could leverage such great advanced understanding to achieve more in REAL exam and social network.

   Source: Adapted from community discussion — Eric0223

   Next question

9. Question 249 · 1459 in bank

   Which of the following BEST describes the role of a document owner when implementing a data classification policy in an organization?

   • AClassifies documents to correctly reflect the level of sensitivity of information they contain
   • BEnsures documents are handled in accordance with the sensitivity of information they contain
   • CDefines the conditions under which documents containing sensitive information may be transmitted
   • DClassifies documents in accordance with industry standards and best practices

   Show answer

   Answer: A

   Explanation

   Answer B is better than A. Option A: Focuses on the initial classification process, ensuring the owner accurately assigns the sensitivity level based on the information in the document. Option B: Emphasizes the ongoing responsibility of the owner to make sure the document is handled appropriately after classification. This includes implementing security measures, access controls, and proper disposal procedures based on its sensitivity.

   Source: Adapted from community discussion — Sibsankar

   Next question

10. Question 250 · 1459 in bank

    The PRIMARY reason to perform internal quality assurance (QA) for an internal audit function is to ensure:

    • Ainherent risk in audits is minimized.
    • Baudit resources are used most effectively.
    • Cinternal audit activity conforms with audit standards and methodology.
    • Dthe audit function is adequately governed and meets performance metrics.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 241. 1459 questions available.