Isaca CISA Quiz 625 Topic 6 Questions 3121-3125

Question: 1

Which of the following is MOST important to consider when scheduling follow-up audits?

AThe efforts required for independent verification with new auditors

BThe impact if corrective actions are not taken

CThe amount of time the auditee has agreed to spend with auditors

DControls and detection risks related to the observations

Show Answer

Question: 2

Which of the following is the GREATEST advantage of vulnerability scanning over penetration testing?

AThe testing produces a lower number of false positive results

BNetwork bandwidth is utilized more efficiently

CCustom-developed applications can be tested more accurately

DThe testing process can be automated to cover large groups of assets

Show Answer

Question: 3

.To properly evaluate the collective effect of preventative, detective, or corrective controls within a process, an IS auditor should be aware of which of the following? Choose the BEST answer.

AThe business objectives of the organization

BThe effect of segregation of duties on internal controls

CThe point at which controls are exercised as data flows through the system

DOrganizational control policies

Show Answer

Question: 4

In regard to moving an application program from the test environment to the production environment, the BEST control would be to have the:

Aapplication programmer copy the source program and compiled object module to the production libraries.

Bapplication programmer copy the source program to the production libraries and then have the production control group compile the program.

Cproduction control group compile the object module to the production libraries using the source program in the test environment.

Dproduction control group copy the source program to the production libraries and then compile the program.

Show Answer

Question: 5

To minimize the cost of a software project, quality management techniques should be applied:

Aas close to their writing (i.e., point of origination) as possible.

Bprimarily at project start-up to ensure that the project is established in accordance with organizational governance standards.

Ccontinuously throughout the project with an emphasis on finding and fixing defects primarily during testing to maximize the defect detection rate.

Dmainly at project close-down to capture lessons learned that can be applied to future projects.

Show Answer

Isaca CISA Quiz:625 Topic:6 Questions:3121-3125