CISA practice questions 521–530

1. Question 521 · 1459 in bank

   Which of the following would be of GREATEST concern to an IS auditor reviewing an IT-related customer service project?

   • AThe project risk exceeds the organization's risk appetite.
   • BExpected business value is expressed in qualitative terms.
   • CExecuting the project will require additional investments.
   • DThe organization will be the first to offer the proposed services.

   Show answer

   Answer: A

   Next question

2. Question 522 · 1459 in bank

   During the course of fieldwork, an internal IS auditor observes a critical vulnerability within a newly deployed application. What is the auditor's BEST course of action?

   • ADocument the finding in the report.
   • BIdentify other potential vulnerabilities.
   • CNotify IT management.
   • DReport the finding to the external auditors.

   Show answer

   Answer: C

   Next question

3. Question 523 · 1459 in bank

   Which of the following is a characteristic of a digital signature used for securing email transmissions?

   • AThe signed message provides confidentiality and availability protection.
   • BThe signature on one message can be transferred to another message.
   • CThe signature is authentic whether or not it has been encrypted.
   • DThe receiver only needs the public key to decrypt the message and verify the signature.

   Show answer

   Answer: C

   Explanation

   option D is not correct as the public key is used to verify the signature, it is not used to decrypt the message. The sender typically encrypts the message with the recipient's public key, and the recipient uses their private key to decrypt it. i go with option C

   Source: Adapted from community discussion — PurpleParrot

   Next question

4. Question 524 · 1459 in bank

   Management has decided to accept a risk in response to a draft audit recommendation. Which of the following should be the IS auditor's NEXT course of action?

   • APerform additional test procedures.
   • BEscalate acceptance to the audit committee.
   • CDocument management's acceptance in the audit report.
   • DEnsure a follow-up audit is on next year’s plan.

   Show answer

   Answer: C

   Next question

5. Question 525 · 1459 in bank

   An external IS auditor is reviewing the continuous monitoring system for a large bank and notes several potential issues. Which of the following would present the GREATEST concern regarding the reliability of the monitoring system?

   • AThe monitoring system was configured by IT.
   • BThe system results are not regularly reviewed by management.
   • CThe alert threshold is updated periodically.
   • DThe measurement method is periodically varied.

   Show answer

   Answer: A

   Next question

6. Question 526 · 1459 in bank

   An IS auditor observes that an organization's IT service desk is closing tickets before problems are fully resolved, causing them to be reopened and impacting service levels. Which of the following is the BEST recommendation to address this situation?

   • AEnsure updates to tickets are traceable to service desk staff.
   • BReview the accuracy of date and time stamps on tickets.
   • CDevelop training on service desk ticket management.
   • DExtend the mean time to resolve problem tickets.

   Show answer

   Answer: C

   Next question

7. Question 527 · 1459 in bank

   Which of the following would be an IS auditor's GREATEST concern when reviewing the early stages of a software development project?

   • AThe lack of acceptance criteria behind user requirements
   • BThe lack of completion of all requirements at the end of each sprint
   • CThe lack of technical documentation to support the program code
   • DThe lack of a detailed unit and system test plan

   Show answer

   Answer: A

   Explanation

   The lack of acceptance criteria behind user requirements: Acceptance criteria provide a clear definition of what is expected of the software being developed, and they are used to determine whether the software is ready for release. If acceptance criteria are missing, it can lead to misunderstandings between the developers and the users, resulting in a software product that does not meet the users' needs.

   Source: Adapted from community discussion — 3008

   Next question

8. Question 528 · 1459 in bank

   During a pre-implementation review, an IS auditor notes that some scenarios have not been tested. Management has indicated that the project is critical and cannot be postponed. Which of the following is the auditor's BEST course of action?

   • ARecommend project implementation be postponed until all scenarios have been tested.
   • BPerform remaining scenario testing in the production environment post implementation.
   • CHelp management complete remaining scenario testing before implementation.
   • DDetermine whether the tested scenarios covered the most significant project risks.

   Show answer

   Answer: D

   Next question

9. Question 529 · 1459 in bank

   Emergency change control procedures MUST include which of the following requirements?

   • ARequest that the help desk make the changes.
   • BEnsure audit logs track emergency changes.
   • CUse an emergency ID to move production programs into development.
   • DUpdate production source libraries to reflect changes.

   Show answer

   Answer: B

   Next question

10. Question 530 · 1459 in bank

    Which of the following is MOST important to consider when developing a business continuity plan (BCP)?

    • AResults of enterprise risk assessment
    • BResults of annual tabletop exercises
    • CUpdated business impact analysis (BIA)
    • DExecutive buy-in of the plan

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 521. 1459 questions available.