CISA practice questions 571–580

1. Question 571 · 1459 in bank

   Which of the following is MOST likely to be reduced when implementing optimal risk management strategies?

   • AInherent risk
   • BResidual risk
   • CSampling risk
   • DDetection risk

   Show answer

   Answer: B

   Next question

2. Question 572 · 1459 in bank

   A current project to develop IT-based solutions will need additional funding to meet changes in business requirements. Who is BEST suited to obtain this additional funding?

   • ABoard of directors
   • BProject manager
   • CProject sponsor
   • DIT strategy committee

   Show answer

   Answer: C

   Next question

3. Question 573 · 1459 in bank

   During the implementation of an enterprise resource planning (ERP) system, an IS auditor is reviewing the results of user acceptance testing (UAT). Which of the following should be the auditor's PRIMARY focus?

   • ADetermine if the business process owner has signed off on the results.
   • BDetermine if application interfaces have been satisfactorily tested.
   • CConfirm that all errors have been communicated to end users.
   • DVerify that system integration testing was performed.

   Show answer

   Answer: A

   Next question

4. Question 574 · 1459 in bank

   Which of the following observations should be of GREATEST concern to an IS auditor assessing access controls for the accounts payable module of a finance system?

   • APayment files are stored on a shared drive in a writable format prior to processing.
   • BAccounts payable staff have access to update vendor bank account details.
   • CThe IS auditor was granted access to create purchase orders.
   • DConfigured delegation limits do not align to the organization's delegations policy.

   Show answer

   Answer: B

   Next question

5. Question 575 · 1459 in bank

   Which of the following is the PRIMARY reason to involve IS auditors in the software acquisition process?

   • ATo help ensure hardware and operating system requirements are considered
   • BTo help ensure proposed contracts and service level agreements (SLAs) address key elements
   • CTo help ensure the project management process complies with policies and procedures
   • DTo help ensure adequate controls to address common threats and risks are considered

   Show answer

   Answer: D

   Next question

6. Question 576 · 1459 in bank

   When planning a review of IT governance, an IS auditor is MOST likely to:

   • Adefine key performance indicators (KPIs).
   • Bobtain information about the control framework adopted by management.
   • Cexamine audit committee minutes for IT-related controls.
   • Dassess whether business process owner responsibilities are consistent.

   Show answer

   Answer: B

   Next question

7. Question 577 · 1459 in bank

   A network analyst is monitoring the network after hours and detects activity that appears to be a brute-force attempt to compromise a critical server. After reviewing the alerts to ensure their accuracy, what should be done NEXT?

   • APerform a root cause analysis.
   • BDocument all steps taken in a written report.
   • CIsolate the affected system.
   • DInvoke the incident response plan.

   Show answer

   Answer: D

   Explanation

   D. Invoke the incident response plan. This ensures that a structured approach is followed, involving the appropriate team members and actions, such as isolating the affected system, investigating the incident, and mitigating the threat. Steps like root cause analysis and documenting the response are important but come later in the process.

   Source: Adapted from community discussion — thusharaj

   Next question

8. Question 578 · 1459 in bank

   Which of the following is the BEST recommendation to drive accountability for achieving the desired outcomes specified in a benefits realization plan for an IT project?

   • ADocument the dependencies between the project and other projects within the same program.
   • BEnsure that IT takes ownership for the delivery and tracking of all aspects of the benefits realization plan
   • CEnsure that the project manager has formal authority for managing the benefits realization plan.
   • DAssign responsibilities, measures, and timelines for each identified benefit within the plan.

   Show answer

   Answer: D

   Next question

9. Question 579 · 1459 in bank

   A steering committee established to oversee an organization's digital transformation program is MOST likely to be involved with which of the following activities?

   • AReviewing escalated project issues
   • BPreparing project status reports
   • CDesigning interface controls
   • DDocumenting requirements

   Show answer

   Answer: A

   Next question

10. Question 580 · 1459 in bank

    Following an internal audit of a database, management has committed to enhance password management controls. Which of the following provides the BEST evidence that management has remediated the audit finding?

    • AScreenshots from end users showing updated password settings
    • BInterviews with management about remediation completion
    • CChange tickets of recent password configuration updates
    • DObservation of updated password settings with database administrators (DBAs)

    Show answer

    Answer: D

    Explanation

    From CISA Review Questions, Answers and Explanations Manual 12th Edition, Question A4-80 Observation is the best and most effective method to test changes to ensure that the process is effectively designed. The answer is D. Observation of updated password settings Note that a report generated from the system directly by the auditor as an evidence is better than observation because the report is more objective than observation.

    Source: Adapted from community discussion — A_Salem

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 571. 1459 questions available.