CISA practice questions 461–470

1. Question 461 · 1459 in bank

   A review of an organization's IT portfolio revealed several applications that are not in use. The BEST way to prevent this situation from recurring would be to implement:

   • Aan information asset acquisition policy.
   • Bbusiness case development procedures.
   • Ca formal request for proposal (RFP) process.
   • Dasset life cycle management.

   Show answer

   Answer: D

   Explanation

   https://www.auvik.com/franklyit/blog/it-asset-lifecycle/ IT asset lifecycle management is the overseeing of an asset from its acquisition to its disposal. This includes tracking and maintaining records of the asset, as well as ensuring it is properly used, secured, and disposed of when no longer needed. It can also help reduce costs associated with maintaining and upgrading assets.

   Source: Adapted from community discussion — Mark_1

   Next question

2. Question 462 · 1459 in bank

   Which of the following BEST indicates a need to review an organization's information security policy?

   • AIncreasing exceptions approved by management
   • BCompletion of annual IT risk assessment
   • CHigh number of low-risk findings in the audit report
   • DIncreasing complexity of business transactions

   Show answer

   Answer: A

   Explanation

   It's A Increase of the complexity in the transactions is not an immediate indicator, and the policy might still cover this complexity.

   Source: Adapted from community discussion — Izzeddin

   Next question

3. Question 463 · 1459 in bank

   Which of the following should be an IS auditor's GREATEST concern when reviewing a reciprocal disaster recovery agreement between two organizations?

   • ARight to terminate the agreement
   • BDifferences in IT policies and procedures
   • CFrequency of system testing
   • DMaintenance of hardware and software compatibility

   Show answer

   Answer: D

   Explanation

   D. Maintenance of hardware and software compatibility: The GREATEST concern for the IS auditor when reviewing a reciprocal disaster recovery agreement should be the maintenance of hardware and software compatibility between the two organizations. Ensuring that the systems, applications, and infrastructure of the two organizations are compatible is crucial for the agreement to work effectively in the event of a disaster. If the hardware and software are not compatible, it can prevent the successful failover and recovery of critical systems, rendering the entire agreement ineffective.

   Source: Adapted from community discussion — seeta

   Next question

4. Question 464 · 1459 in bank

   As part of control self-assessment (CSA) activities in the finance department, an IS auditor identified that some of the controls were not tested and documented properly. Which of the following should the auditor do NEXT?

   • AProvide guidance regarding control objectives to staff involved in the CSA.
   • BExpand the scope of the next internal audit planned for the finance department.
   • CIssue an audit report to the finance manager regarding the inadequate testing of controls.
   • DPerform additional testing to complement CSA activities in the finance department.

   Show answer

   Answer: D

   Explanation

   Given that the IS auditor has identified that some controls in the finance department were not properly tested and documented during control self-assessment (CSA) activities, the immediate next step should be to perform additional testing. This is necessary to ensure that these controls are adequately assessed and documented, which is essential for providing reliable assurance through the CSA process.

   Source: Adapted from community discussion — Swallows

   Next question

5. Question 465 · 1459 in bank

   An external attacker spoofing an internal Internet Protocol (IP) address can BEST be detected by which of the following?

   • AComparing the source address to the domain name server (DNS) entry
   • BUsing static IP addresses for identification
   • CUsing a state table to compare the message states of each packet as it enters the system
   • DComparing the source address to the interface used as the entry point

   Show answer

   Answer: D

   Explanation

   When packets enter a network, they do so through specific network interfaces. Each interface typically has a designated IP address range or subnet associated with it. By comparing the source IP address of incoming packets to the IP address range expected from the interface through which they arrive, you can detect discrepancies that may indicate IP address spoofing.

   Source: Adapted from community discussion — Swallows

   Next question

6. Question 466 · 1459 in bank

   During an audit of a data center with updated technology, the auditee indicates that environmental controls are the same as those used in the previous environment. The IS auditor should FIRST:

   • Atest selected controls.
   • Brecommend changes to the maintenance schedule.
   • Cdetermine whether the controls are active.
   • Dreview equipment specifications.

   Show answer

   Answer: D

   Next question

7. Question 467 · 1459 in bank

   In an environment that automatically reports all program changes, which of the following is the MOST efficient way to detect unauthorized changes to production programs?

   • APeriodically running and reviewing test data against production programs
   • BVerifying user management approval of modifications
   • CReviewing the last compile date of production programs
   • DManually comparing code in production programs to controlled copies

   Show answer

   Answer: C

   Explanation

   Answer: C while user management approval is a critical control, it might not be the most efficient method for detecting unauthorized changes in an environment with automated reporting mechanisms. Reviewing the last compile date of production programs aligns better with the context of automatic reporting and provides a more direct and efficient means of detecting unauthorized changes.

   Source: Adapted from community discussion — a84n

   Next question

8. Question 468 · 1459 in bank

   Which component of a business case provides the BEST indication that due diligence was performed during the vendor selection process?

   • AManagement approval
   • BProblem statement
   • CAlternative solutions
   • DCost-benefit analysis

   Show answer

   Answer: C

   Explanation

   Both C. Alternative solutions and D. Cost-benefit analysis are important components indicating due diligence. However, the alternative solutions component tends to provide a broader view of the due diligence process as it implies the consideration and comparison of different vendors or solutions, addressing multiple factors (financial, technical, operational) rather than just the financial perspective.

   Source: Adapted from community discussion — 4dfe785

   Next question

9. Question 469 · 1459 in bank

   Which of the following should be done FIRST when auditing an IT portfolio management process at a large organization?

   • AConduct walk-through meetings with IT project managers.
   • BCalculate the IT portfolio return on investment (ROI).
   • CVerify whether the IT project portfolio is kept up to date.
   • DConfirm industry best practices for IT portfolio management are followed.

   Show answer

   Answer: C

   Explanation

   After verifying the currency of the IT project portfolio (option C), the auditor can then proceed to conduct walk-through meetings with IT project managers (option A) to gather more detailed information about specific projects, their management practices, and challenges. This sequential approach ensures that the audit is thorough and systematically addresses key aspects of the IT portfolio management process. Therefore, option C, verifying whether the IT project portfolio is kept up to date, is the appropriate first step when auditing an IT portfolio management process at a large organization.

   Source: Adapted from community discussion — Swallows

   Next question

10. Question 470 · 1459 in bank

    Which of the following should an IS auditor do FIRST when determining whether unauthorized changes have been made to production code?

    • AReview access control permissions operating within the production program libraries.
    • BExamine the change control system records and trace them forward to object code files.
    • CReview change-approved designations established within the change control system.
    • DExamine object code to find instances of changes and trace them back to change control records.

    Show answer

    Answer: B

    Explanation

    A. Review access control permissions operating within the production program libraries. By reviewing access control permissions, the auditor can identify who has the ability to make changes to the production code. This helps in understanding whether the controls in place are adequate to prevent unauthorized changes. If access controls are weak or improperly configured, it increases the risk of unauthorized modifications.

    Source: Adapted from community discussion — pLulu

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 461. 1459 questions available.