Certified Information Systems Auditor1,459 questions across 146 pages are complete and free, with no account or card.
1459 questions in this bank
Free access · progress saved on this device
Many departments of an organization have not implemented audit recommendations by their agreed upon target dates. Who should address this situation?
Answer: D
Answer: D Senior management is ultimately accountable for ensuring that the organization operates effectively and efficiently, which includes addressing deficiencies identified through audits and taking corrective action to mitigate risks.
Source: Adapted from community discussion — a84n
An advantage of object-oriented system development is that it:
Answer: D
Object-oriented system development is particularly advantageous when dealing with data that has complex relationships. This is because it allows for modeling real-world entities and their interactions in a more natural and intuitive way through the use of objects, classes, inheritance, and polymorphism. These features facilitate the management and manipulation of data that has intricate interdependencies, making the system more modular, scalable, and maintainable. Why not A.? While OOSD can improve code readability and maintainability, the initial coding effort might be higher compared to simpler procedural languages.
Source: Adapted from community discussion — 46080f2
Which of the following MUST be completed as part of the annual audit planning process?
Answer: C
The correct answer is C. BIA is a must in BCP Planning, not Audit Planning. Risk assessment is a must in Audit Planning.
Source: Adapted from community discussion — MichaelHoang
Which of the following MOST effectively minimizes downtime during system conversions?
Answer: B
Code changes are compiled and placed in a change folder by the developer. An implementation team migrates changes to production from the change folder. Which of the following BEST indicates separation of duties is in place during the migration process?
Answer: B
The implementation team's lack of access to modify source code shows one aspect of the separation of duties in place, but it is not a complete proof of separation of duties. Simply not having access does not ensure that other processes (e.g. code reviews and approval processes) are in place. Separation of duties is not just about having separate roles, but also includes checks between each role, which makes it even more important that code reviews are performed.
Source: Adapted from community discussion — Swallows
Management has decided to include a compliance manager in the approval process for a new business that may require changes to the IT infrastructure. Which of the following is the GREATEST benefit of this approach?
Answer: C
Malicious program code was found in an application and corrected prior to release into production. After the release, the same issue was reported. Which of the following is the IS auditor's BEST recommendation?
Answer: B
is B , If a previously identified issue reoccurs after corrections have been made, it is possible that the corrections were not implemented correctly or that new issues were introduced during the correction process. Therefore, it is important to investigate why the issue was not fully resolved and to take steps to prevent a recurrence.
Source: Adapted from community discussion — 007Georgeo
For an organization that has plans to implement web-based trading, it would be MOST important for an IS auditor to verify the organization's information security plan includes:
Answer: C
Which cloud deployment model is MOST likely to be limited in scalability?
Answer: B
Is B : private clouds are often limited in scalability due to the fact that they are based on a fixed infrastructure that cannot be easily expanded to accommodate rapid growth or fluctuations in demand.
Source: Adapted from community discussion — 007Georgeo
After the release of an application system, an IS auditor wants to verify that the system is providing value to the organization. The auditor's BEST course of action would be to:
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CISA practice, question 701. 1459 questions available.
Version 1.0.0. How we source questions