Isaca CISA Quiz 618 Topic 9 Questions 3086-3090

Question: 1

The IS auditor has recommended that management test a new system before using it in production mode The BEST approach for management in developing a test plan is to use processing parameters that are

Arandomly selected by the user

Bprovided by the vendor of the application.

Csimulated by production entities and customers

Drandomly selected by a test generator

Show Answer

Question: 2

An IS auditor is reviewing a data conversion project Which of the following is the auditor's BEST recommendation prior to go-live?

AEstablish a conliguiation baseline.

BConduct a mock conversion test.

CAutomate the test scripts

DReview test procedures and scenarios

Show Answer

Question: 3

During an ongoing audit management requests a briefing on the findings to date Which of the following is the IS

auditor's BEST course of action? *

APresent observations lor discussion only.

BRequest management wait until a final report is ready for discussion

CRequest the auditee provide management responses

DReview working papers with the auditee

Show Answer

Question: 4

An IS auditor discovers a box of hard drives in a secured location that are overdue for physical destruction. The vendor responsible for this task was never made aware of these hard drives. Which of the following is the BEST

course of action to address this issue?

AExamine the workflow to identify gaps in asset handling responsibilities.

BRecommend the drives be sent to the vendor for destruction.

CEvaluate the corporate asset handling policy for potential gaps.

DEscalate the finding to the asset owner for remediation

Show Answer

Question: 5

Which of the following is the BEST way for an IS auditor to determine how well an information security program has been implemented throughout the organization?

AEvaluate the percentage of employees who have taken security awareness training.

BReview security awareness training content for completeness.

CEvaluate the integration of security best practices into business workflows.

DPerform security risk assessments for the organization's business units

Show Answer

Isaca CISA Quiz:618 Topic:9 Questions:3086-3090