Question 1

An IS auditor noted that a change to a critical calculation was placed into the production environment without being tested. Which of the following is the BEST way to obtain assurance that the calculation functions correctly?

Options :

A : Check regular execution of the calculation batch job.

B : Interview the lead system developer.

C : Obtain post-change approval from management.

D : Perform substantive testing using computer-assisted audit techniques (CAATs).

Answer: A

Question 2

The GREATEST benefit of using a prototyping approach in software development is that it helps to:

Options :

A : improve efficiency of quality assurance (QA) testing.

B : conceptualize and clarify requirements.

C : decrease the time allocated for user testing and review.

D : minimize scope changes to the system.

Answer: D

Question 3

During an information security review, an IS auditor learns an organizational policy requires all employees to attend information security training during the first week of each new year What is the auditor's BEST recommendation to ensure employees hired after January receive adequate guidance regarding security awareness?

Options :

A : Require management of new employees to provide an overview of security

B : Revise the policy to require security training every six months for all employees

C : Ensure new employees read and sign acknowledgment of the acceptable use policy

D : Revise the policy to include security training during onboarding

Answer: D

Question 4

An IS auditor should be MOST concerned with the placement of environmental detectors for heat, water, and smoke in which of the following locations?

Options :

A : Inside ventilation ducts

B : Around cooling units

C : Above the ceiling

D : Under the floor

Answer: D

Question 5

Which of the following issues associated with a data center's closed circuit television (CCTV) surveillance cameras should be of MOST concern to an IS auditor?

Options :

A : CCTV recordings are not regularly reviewed.

B : CCTV records are deleted after one yea.

C : CCTV footage is not recorded 24 x 7.

D : CCTV cameras are not installed in break rooms.

Answer: A

Confidently Practice Online with Free CISA Exam Cram

Buying Options: