CISA Exam Dumps - Certified Information Systems Auditor

Go to page:

Question # 409

Which of the following controls is BEST implemented through system configuration?

Network user accounts for temporary workers expire after 90 days.

Application user access is reviewed every 180 days for appropriateness.

Financial data in key reports is traced to source systems for completeness and accuracy.

Computer operations personnel initiate batch processing jobs daily.

Full Access

Question # 410

Which of the following BEST enables an IS auditor to prioritize financial reporting spreadsheets for an end-user computing (EUC) audit?

Understanding the purpose of each spreadsheet

Identifying the spreadsheets with built-in macros

Reviewing spreadsheets based on file size

Ascertaining which spreadsheets are most frequently used

Full Access

Question # 411

To help determine whether a controls-reliant approach to auditing financial systems in a company should be used, which sequence of IS audit work is MOST appropriate?

Review of the general IS controls followed by a review of the application controls

Detailed examination of financial transactions followed by review of the general ledger

Review of major financial applications followed by a review of IT governance processes

Review of application controls followed by a test of key business process controls

Full Access

Question # 412

Which of the following should be of GREATEST concern to an IS auditor reviewing project documentation for a client relationship management (CRM) system migration project?

The technical migration is planned for a holiday weekend and end users may not be available.

Five weeks prior to the target date, there are still numerous defects in the printing functionality.

A single implementation phase is planned and the legacy system will be immediately decommissioned.

Employees are concerned that data representation in the new system is completely different from the old system.

Full Access

Question # 413

During the course of fieldwork, an internal IS auditor observes a critical vulnerability within a newly deployed application. What is the auditor's BEST course of action?

Document the finding in the report.

Identify other potential vulnerabilities.

Notify IT management.

Report the finding to the external auditors.

Full Access

Question # 414

Which of the following is the GREATEST risk associated with lack of IT involvement in the organization's strategic planning initiatives?

Business strategies may not align with IT capabilities.

Business strategies may not consider emerging technologies.

IT strategies may not align with business strategies.

IT strategic goals may not be considered by the business.

Full Access

Question # 415

An IS auditor is reviewing a medical device that is attached to a patientâ€™s body, which automatically takes and uploads measurements to a cloud server. Treatment may be updated based on the measurements. Which of the following should be the auditor's PRIMARY focus?

Physical access controls on the device

Security and quality certification of the device

Device identification and authentication

Confirmation that the device is regularly updated

Full Access

Question # 416

Which of the following is a PRIMARY benefit of using risk assessments to determine areas to be included in an audit plan?

Timely audit execution

Effective allocation of audit resources

Reduced travel and expense costs

Effective risk mitigation

Full Access