CISA practice questions 721–730

1. Question 721 · 1459 in bank

   During the implementation of an upgraded enterprise resource planning (ERP) system, which of the following is the MOST important consideration for a go-live decision?

   • APost-implementation review objectives
   • BBusiness case
   • CRollback strategy
   • DTest cases

   Show answer

   Answer: C

   Explanation

   A rollback strategy is a plan that outlines the steps to be taken in case the new ERP system fails to function correctly or causes significant issues. It provides a contingency plan for how to revert the system to the previous version or backup state to mitigate any potential damage to the organization's operations.

   Source: Adapted from community discussion — 3008

   Next question

2. Question 722 · 1459 in bank

   When reviewing the functionality of an intrusion detection system (IDS), the IS auditor should be MOST concerned if:

   • Alegitimate packets blocked by the system have increased.
   • Bfalse positives have been reported.
   • Cdetected events have increased.
   • Dactual attacks have not been identified.

   Show answer

   Answer: D

   Explanation

   Attacks that are not identified by the system are at higher risk because they are unknown and no action is taken to address them.

   Source: Adapted from community discussion — Swallows

   Next question

3. Question 723 · 1459 in bank

   An organization is disposing of a system containing sensitive data and has deleted all files from the hard disk. An IS auditor should be concerned because:

   • Adeleted data cannot easily be retrieved.
   • Bbackup copies of files were not deleted as well.
   • Cdeleting all files separately is not as efficient as formatting the hard disk.
   • Ddeleting the files logically does not overwrite the files' physical data.

   Show answer

   Answer: D

   Explanation

   D. An IS auditor should be concerned that deleting the files logically does not overwrite the files' physical data. When files are deleted from a hard disk, the data is not actually removed from the disk; instead, the space that the files occupy is marked as available for reuse. This means that sensitive data may still be present on the hard disk, even if the files have been deleted. A determined attacker or a skilled data recovery specialist may be able to recover the deleted data, potentially exposing the organization to data breaches or other security incidents.

   Source: Adapted from community discussion — SRJ13

   Next question

4. Question 724 · 1459 in bank

   What is the MOST difficult aspect of access control in a multiplatform, multiple-site client/server environment?

   • ARestricting a local user to necessary resources on a local platform
   • BCreating new user IDs valid only on a few hosts
   • CMaintaining consistency throughout all platforms
   • DRestricting a local user to necessary resources on the host server

   Show answer

   Answer: C

   Next question

5. Question 725 · 1459 in bank

   Following significant business model changes, which of the following is the MOST important consideration when updating the IT policy?

   • AThe policy is endorsed by IT leadership.
   • BThe policy is compliant with relevant laws and regulations.
   • CThe policy is integrated into job descriptions.
   • DThe policy is aligned with industry standards and best practice.

   Show answer

   Answer: B

   Explanation

   the policy needs to reflect the new regulatory requirements and help the organization avoid legal and regulatory issues. While the other options are important considerations, ensuring compliance with laws and regulations is the most important priority.

   Source: Adapted from community discussion — 007Georgeo

   Next question

6. Question 726 · 1459 in bank

   Which of the following would be MOST useful to an IS auditor assessing the effectiveness of IT resource planning?

   • ABudget execution status
   • BA capacity analysis of IT operations
   • CA succession plan for key IT personnel
   • DA list of new applications to be implemented

   Show answer

   Answer: B

   Explanation

   A capacity analysis provides insight into whether the organization’s IT resources (such as hardware, software, and human resources) can meet current and future demands.

   Source: Adapted from community discussion — Eiad1100

   Next question

7. Question 727 · 1459 in bank

   Which of the following should be an IS auditor's PRIMARY focus when developing a risk-based IS audit program?

   • ABusiness processes
   • BBusiness plans
   • CPortfolio management
   • DIT strategic plans

   Show answer

   Answer: A

   Next question

8. Question 728 · 1459 in bank

   During the design phase of a software development project, the PRIMARY responsibility of an IS auditor is to evaluate the:

   • Adevelopment methodology employed.
   • Bcontrols incorporated into the system specifications.
   • Cfuture compatibility of the design.
   • Dproposed functionality of the application.

   Show answer

   Answer: B

   Explanation

   B Is correct, The PRIMARY responsibility of an IS auditor during the design phase of a software development project is to evaluate the controls incorporated into the system specifications. The auditor should ensure that proper controls are included in the design to prevent, detect, and correct errors or irregularities that could adversely impact the system's integrity or the organization's operations. This includes ensuring that security, accuracy, completeness, and other control objectives are appropriately addressed in the system specifications. While the other options listed may also be relevant to the auditor's evaluation, they are not the PRIMARY responsibility during the design phase.

   Source: Adapted from community discussion — 007Georgeo

   Next question

9. Question 729 · 1459 in bank

   During an audit of a disaster recovery plan (DRP) for a critical business area, an IS auditor finds that not all critical systems are covered. What should the auditor do NEXT?

   • AEvaluate the impact of not covering the systems
   • BEscalate the finding to senior management
   • CEvaluate the prior year's audit results regarding critical system coverage
   • DVerify whether the systems are part of the business impact analysis (BIA)

   Show answer

   Answer: D

   Next question

10. Question 730 · 1459 in bank

    Due to a recent business divestiture, an organization has limited IT resources to deliver critical projects. Reviewing the IT staffing plan against which of the following would BEST guide IT management when estimating resource requirements for future projects?

    • APeer organization staffing benchmarks
    • BHuman resources (HR) sourcing strategy
    • CBudgeted forecast for the next financial year
    • DRecords of actual time spent on projects

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CISA practice, question 721. 1459 questions available.