Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Which of the following is the BEST way for senior audit leadership to be engaged during the planning phase of an audit in order to improve audit quality?
Answer: C
C is right answer. This encompasses a systematic approach to identifying, controlling, and monitoring all components of an IT system throughout its lifecycle.
Source: Adapted from community discussion — Sibsankar
Which of the following is MOST effective in detecting an intrusion attempt?
Answer: D
In which of the following sampling methods is the entire sample considered to be irregular if a single error is found?
Answer: A
Which of the following provides the BEST overview of an organization's audit universe when developing a long-term audit plan?
Answer: D
During a security access review, an IS auditor identifies a segregation of duties issue involving financial reporting for which there are no mitigating controls. Which of the following stakeholders should be notified of this finding FIRST?
Answer: C
C. Operational management When identifying a segregation of duties issue during a security access review, the IS auditor should first notify operational management. Operational management is responsible for the day-to-day operations and processes within the organization, including financial reporting. They need to be made aware of the issue promptly so that they can take appropriate action to address the segregation of duties concern and implement necessary controls or process changes. It is crucial to inform operational management first to ensure they have the opportunity to rectify the issue before escalating it to higher-level stakeholders such as the audit committee, external auditors, or the board of directors.
Source: Adapted from community discussion — KAP2HURUF
An organization uses system interfaces to disburse money to various banks. Which of the following features in the system interfaces is MOST important to provide assurance that the money is going to the right bank account?
Answer: D
D. Digital signature A digital signature provides assurance of the authenticity and integrity of the transaction. It ensures that the transaction has been initiated by a known source (authenticity) and that it has not been tampered with during transmission (integrity). This is crucial in financial transactions to ensure that the money is being sent to the intended recipient. While the other options are also important security features, they do not provide the same level of assurance as a digital signature when it comes to ensuring the money is going to the right bank account.
Source: Adapted from community discussion — MJORGER
Which of the following is MOST helpful to an IS auditor reviewing the alignment of planned IT budget with the organization's goals and strategic objectives?
Answer: A
The most helpful option for an IS auditor reviewing the alignment of a planned IT budget with an organization's goals and strategic objectives would be Enterprise Architecture (EA). Enterprise Architecture provides a holistic view of an organization's IT landscape, including its goals, objectives, processes, systems, and technology infrastructure. By analyzing the enterprise architecture, an IS auditor can assess how the planned IT budget aligns with the organization's strategic objectives. They can identify areas where the budget allocation supports or deviates from the goals and make recommendations for adjustments if necessary. While audit recommendations, risk assessment reports, and business impact analysis (BIA) are also valuable in the audit process, they are more focused on specific areas of audit scope rather than providing a comprehensive view of the IT budget alignment with the organization's goals and strategic objectives.
Source: Adapted from community discussion — KAP2HURUF
Which of the following BEST facilitates strategic program management?
Answer: A
The MOST important reason why an IT risk assessment should be updated on a regular basis is to:
Answer: B
As part of the risk management process, threats and vulnerabilities should be mapped to:
Answer: B
Mapping threats to assets and vulnerabilities can help identify their possible combinations. Each threat can be associated with a specific vulnerability, or even multiple vulnerabilities. Unless a threat can exploit a vulnerability, it is not a risk to an asset.
Source: Adapted from community discussion — KAP2HURUF
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 301. 1459 questions available.
Version 1.0.0. How we source questions