CISA practice questions 321–330

1. Question 321 · 1459 in bank

   The objectives of business process reengineering (BPR) should PRIMARILY include:

   • Aincremental changes in productivity.
   • Borganizational structure changes.
   • Csystem improvements.
   • Dperformance efficiencies.

   Show answer

   Answer: D

   Explanation

   Business Process Reengineering (BPR) is primarily focused on achieving significant improvements in performance efficiencies by rethinking and redesigning business processes. While system improvements (Option C) and organizational structure changes (Option B) may be part of the reengineering process, the core objective is to enhance overall performance and achieve transformative results. Incremental changes in productivity (Option A) may not capture the scale of transformation typically associated with BPR.

   Source: Adapted from community discussion — KAP2HURUF

   Next question

2. Question 322 · 1459 in bank

   Which of the following should be the GREATEST concern for an IS auditor reviewing the implementation of a security information and event management (SIEM) system?

   • ASIEM rule tuning is only reviewed annually.
   • BNetwork monitoring events are not aggregated into the SIEM.
   • COnly the last seven days of logs from the SIEM are maintained for review.
   • DSecurity operations center (SOC) staff have not been fully trained on how to use the SIEM.

   Show answer

   Answer: B

   Next question

3. Question 323 · 1459 in bank

   An organization experienced a domain name system (DNS) attack caused by default user accounts not being removed from one of the servers. Which of the following would have been the BEST way to mitigate the risk of this DNS attack?

   • ARequire all employees to attend training for secure configuration management.
   • BHave a third party configure the virtual servers.
   • CConfigure the servers from an approved standard configuration.
   • DConfigure the intrusion prevention system (IPS) to identify DNS attacks.

   Show answer

   Answer: C

   Next question

4. Question 324 · 1459 in bank

   When utilizing attribute sampling, which of the following would cause the sample size to increase?

   • ATolerable error rate decrease
   • BExpected error rate decrease
   • CPopulation size decrease
   • DAcceptable risk level increase

   Show answer

   Answer: A

   Next question

5. Question 325 · 1459 in bank

   An IS auditor is reviewing a client’s outsourced payroll system to assess whether the financial audit team can rely on the application. Which of the following findings would be the auditor's GREATEST concern?

   • APayroll processing costs have not been included in the IT budget.
   • BUser access rights have not been periodically reviewed by the client.
   • CThe third-party contract does not comply with the vendor management policy.
   • DThe third-party contract has not been reviewed by the legal department.

   Show answer

   Answer: D

   Explanation

   I vote for D., but seem to be pretty much alone in this view. The usual AI chatbot's here have different answers, but none say. D. Anyway, I'm sticking with D. The way I've understood ISACA thinking so far from many other ISACA questions is that for third-party contracts, having a contract reviewed by a Legal Department or Lawyer is paramount. At least in the questions from the official ISACA learning material, I was always right with this understanding. So I stick with D.

   Source: Adapted from community discussion — 46080f2

   Next question

6. Question 326 · 1459 in bank

   Which of the following is the MOST efficient control that helps to ensure complete data transfer through an interface?

   • AUse transmission encryption for data transfer between systems.
   • BUse protocols that allow full duplex communication between source and destination systems.
   • CCompare data hash values between the source and destination systems.
   • DConduct code reviews of data transfer encoders and decoders in source and destination systems.

   Show answer

   Answer: C

   Next question

7. Question 327 · 1459 in bank

   Which of the following helps to ensure the integrity of data for a system interface?

   • AUser acceptance testing (UAT)
   • BValidation checks
   • CSystem interface testing
   • DAudit logs

   Show answer

   Answer: B

   Next question

8. Question 328 · 1459 in bank

   The BEST indicator of an optimized quality management system (QMS) is that it:

   • Ais endorsed by senior management
   • Baligns with an industry recognized framework.
   • Cis integrated and enforced in all IT activities.
   • Ddefines and monitors all IT QMS activities.

   Show answer

   Answer: C

   Explanation

   Answer: C Defining and monitoring all IT QMS activities, is essential for establishing clear objectives, metrics, and processes for quality management, but it does not guarantee optimization unless these activities are integrated, enforced, and continuously improved throughout the organization.

   Source: Adapted from community discussion — a84n

   Next question

9. Question 329 · 1459 in bank

   Which of the following is an objective of IT project portfolio management?

   • ASelection of sound, strategically aligned investment opportunities
   • BSuccessful implementation of projects
   • CValidation of business case benefits
   • DEstablishment of tracking mechanisms

   Show answer

   Answer: A

   Next question

10. Question 330 · 1459 in bank

    Which of the following observations should be of GREATEST concern to an IS auditor reviewing an organization's enterprise architecture (EA) program?

    • AThe EA program governs projects that are not IT-related.
    • BInformation security requirements are reviewed by the EA program.
    • CIT application owners have sole responsibility for architecture approval.
    • DThe architecture review board is chaired by the chief information officer (CIO).

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 321. 1459 questions available.