Question 281 · 1459 in bank
Which of the following development practices would BEST mitigate the risk associated with theft of user credentials transmitted between mobile devices and the corporate network?
Show answer
Answer: A
Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following development practices would BEST mitigate the risk associated with theft of user credentials transmitted between mobile devices and the corporate network?
Answer: A
An IS auditor noted a recent production incident in which a teller transaction system incorrectly charged fees to customers due to a defect from a recent release. Which of the following should be the auditor's NEXT step?
Answer: C
D for me. The auditor should review the change mgmt process to determine how this release was approved. It is likely that testing procedures were insufficient
Source: Adapted from community discussion — Eruza89
Which of the following changes intended to improve and streamline an organization's incident management process would be a potential concern to an IS auditor?
Answer: B
Allowing individual reporters to determine priority runs the risk of subjective judgment and not prioritizing important incidents appropriately, which can lead to less efficient incident management and resolution.
Source: Adapted from community discussion — Swallows
Which type of risk would MOST influence the selection of a sampling methodology?
Answer: A
This is A. Detection risk - risk that the audit procedures will not detect a material misstatement. that is the risk that something will get missed by the auditor. In this case. What would influence most would be inherit risk.
Source: Adapted from community discussion — blehbleh
Which of the following should be responsible for verifying changes to an application are authorized?
Answer: C
This is C. The business line does give direction to ensure that it lines up with business needs but the release management team is the overseer of releases.
Source: Adapted from community discussion — blehbleh
Which of the following is the PRIMARY reason an IS auditor should discuss observations with management before delivering a final report?
Answer: B
B. Validate the audit observations Before finalizing the audit report, it’s crucial for the auditor to discuss their findings with management. This allows the management to provide their perspective and potentially additional context that the auditor might not be aware of.
Source: Adapted from community discussion — MJORGER
A business has requested an audit to determine whether information stored in an application is adequately protected. Which of the following is the MOST important action before the audit work begins?
Answer: D
Compared to developing a system in-house, acquiring a software package means that the need for testing by end users is:
Answer: B
Which of the following is MOST useful for determining whether the goals of IT are aligned with the organization's goals?
Answer: C
Which of the following management actions would BEST enable an IS auditor to make the most efficient use of analytics software during an audit?
Answer: C
While deploying analytics tools with natural language processing (Option B) can enhance the usability of the tools, the foundation for effective analytics is having access to high-quality data. Similarly, reviewing audit findings (Option A) and granting access to anonymized customer data (Option D) are important considerations but might not directly address the efficiency of using analytics software. In summary, having access to complete and accurate data is fundamental for the efficient use of analytics software during an audit.
Source: Adapted from community discussion — KAP2HURUF
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 281. 1459 questions available.
Version 1.0.0. How we source questions