CISA Exam Dumps - Certified Information Systems Auditor

Go to page:

Question # 257

Which of the following is the PRIMARY objective of performing quality assurance (QA) in a system development process?

To ensure that expected benefits have been realized

To ensure the developed system meets business requirements

To ensure the developed system integrates well with another system

To help determine high-level requirements for the new system

Full Access

Question # 258

Which of the following criteria is MOST important for the successful delivery of benefits from an IT project?

Assessing the impact of changes to individuals and business units within the organization

Involving key stakeholders during the development and execution phases of the project

Ensuring that IT project managers have sign-off authority on the business case

Quantifying the size of the software development effort required by the project

Full Access

Question # 259

What should an IS auditor ensure when a financial organization intends to utilize production data in the testing environment?

The data utilized is de-identified.

The data utilized is accurate.

The data utilized is complete.

The data utilized is current.

Full Access

Question # 260

An IS auditor is reviewing the system development practices of an organization that is about to move from a Waterfall to an Agile approach. Which of the following is MOST important for the auditor to focus on as a result of this move?

Secure code review

Release management

Capacity planning

Code documentation

Full Access

Question # 261

Which of the following cloud capabilities BEST enables an organization to meet unexpectedly high service demand?

Scalability

High availability

Alternate routing

Flexibility

Full Access

Question # 262

Which of the following is the MOST effective way to detect as many abnormalities as possible during an IS audit?

Conduct a walk-through of the process.

Perform substantive testing on sampled records.

Perform judgmental sampling of key processes.

Use a data analytics tool to identify trends.

Full Access

Question # 263

Which of the following is the PRIMARY advantage of using an automated security log monitoring tool instead of conducting a manual review to monitor the use of privileged access?

Reduced costs associated with automating the review

Increased likelihood of detecting suspicious activity

Ease of storing and maintaining log file

Ease of log retrieval for audit purposes

Full Access

Question # 264

An organization is implementing a new data loss prevention (DLP) tool. Which of the following will BEST enable the organization to reduce false positive alerts?

Using the default policy and tool rule sets

Configuring a limited set of rules

Deploying the tool in monitor mode

Reducing the number of detection points

Full Access