Isaca CISA Quiz 620 Topic 1 Questions 3096-3100

Question: 1

When assessing whether an organization's IT performance measures are comparable to other organizations in

the same industry which of the following would be MOST helpful to review?

AIT governance frameworks

BBenchmarking surveys

CUtilization reports

DBalanced scorecard

Show Answer

Question: 2

When evaluating information security governance within an organization which of the following findings should

be of MOST concern to an IS auditor?

AInformation security policies are updated annually

BThe data center manager has final sign-off on security projects.

CThe information security department has difficulty filling vacancies

DAn information security governance audit was not conducted within the past year

Show Answer

Question: 3

An IS auditor finds that a recently deployed application has a number of developers with inappropriate update access left over from the testing environment Which of the following would have BEST prevented the update access from being migrated?

AIncluding a step within the SDLC to clean-up access prior to go-live

BHolding the application owner accountable for application security

CEstablishing a role based matrix for provisioning users

DRe-assigning user access rights in the quality assurance (QA) environment

Show Answer

Question: 4

An organization has implemented a quarterly job schedule to update database tables so prices are adjusted in line with a price index These changes do not go through the regular change management process Which of the following is the MOST important control to have in place?

AAn overarching approval is obtained from the change advisory board

BEach production run is approved by an authorized individual

CUser acceptance testing (UAT) is performed after the production run

DException reports are generated to identify anomalies

Show Answer

Question: 5

During which phase of a system development project should key performance indicators (KPIs) be established'?

APlanning phase

BClosure phase

CExecution phase

DInitiation phase

Show Answer

Isaca CISA Quiz:620 Topic:1 Questions:3096-3100