Question 1

Which of the following would be of GREATEST concern to an IS auditor assessing the organizational risk associated with fraud?

Options :

A : Unauthorized changes to the production environment have been detected.

B : Periodic user access reviews to financial systems are inconsistent.

C : A major financial application is developed and maintained by the application team.

D : The organization does not require employees to take mandatory leave.

Answer: A

Question 2

Which of the following is the GREATEST concern associated with a high number of IT policy exceptions approved by management?

Options :

A : The exceptions are likely to continue indefinitely.

B : The exceptions may negatively impact process efficiency.

C : The exceptions may elevate the level of operational risk.

D : The exceptions may result in noncompliance.

Answer: C

Question 3

An organization uses system interfaces to disburse money to various banks. Which of the following features in the system interfaces is MOST important to provide assurance that the money is going to the right bank account?

Options :

A : Audit logging

B : Nonrepudiation

C : Encryption

D : Digital signature

Answer: D

Question 4

Which of the following should be an IS auditor's PRIMARY focus when developing a risk-based IS audit program?

Options :

A : Business processes

B : Business plans

C : Portfolio management

D : IT strategic plans

Answer: A

Question 5

Which of the following is the MOST important consideration for patching mission critical business application servers against known vulnerabilities?

Options :

A : Network vulnerability scans are conducted after patches are implemented.

B : Patches are implemented in a test environment prior to rollout into production.

C : Vulnerability assessments are periodically conducted according to defined schedules.

D : Roles and responsibilities for implementing patches are defined.

Answer: B

Free CISA Mock Exam – Practice Online Confidently

Buying Options: