100% satisfaction guarantee Immediately available after payment Both online and in PDF No strings attached
logo-home
Previously searched by you
Previously searched by you
logo
Certified Information Systems Auditor (CISA) Cert Guide Questions and Answers (100% Pass) CA$19.48   Add to cart
Quickly navigate to
Preview
  2.  
  3. CISA - Certified Information Systems Auditor
  4.  
  5. CISA - Certified Information Systems Auditor

Exam (elaborations)

Certified Information Systems Auditor (CISA) Cert Guide Questions and Answers (100% Pass)
 7 views  0 purchase
  • Course
  • CISA - Certified Information Systems Auditor
  • Institution
  • CISA - Certified Information Systems Auditor

Certified Information Systems Auditor (CISA) Cert Guide Questions and Answers (100% Pass) Which of the following best describes a baseline document? a. A PCI industry standard requiring a 15-minute session timeout b. Installation step recommendations from the vendor for an Active Directory ser...

[Show more]

Preview 4 out of 56  pages

Document information

  • August 16, 2024
  • 56
  • 2024/2025
  • Exam (elaborations)
  • Questions & answers

Subjects

  • certified information systems auditor cisa cert

Written for

  • CISA - Certified Information Systems Auditor
  • CISA - Certified Information Systems Auditor

Seller

avatar-seller
OliviaWest

Reviews received

Content preview

©PREP4EXAMS 2024/2025 REAL EXAM DUMPS Tuesday, August 6, 2024 10,57 AM



Certified Information Systems Auditor (CISA) Cert
Guide Questions and Answers (100% Pass)


Which of the following best describes a baseline document?

a. A PCI industry standard requiring a 15-minute session timeout

b. Installation step recommendations from the vendor for an Active Directory

server

c. A network topography diagram of the Active Directory forest


d. Security configuration settings for an Active Directory server - Answer✔️✔️-D. A

baseline is correct because it is a platform-specific rule related to the security

configuration for an Active Directory server. Answers A, B, and C are not platform

specific.

Which of the following best describes integrated auditing?

a. Integrated auditing places internal control in the hands of management and

reduces the time between the audit and the time of reporting.

b. Integrated auditing combines the operational audit function, the financial audit

function, and the IS audit function.




1

,©PREP4EXAMS 2024/2025 REAL EXAM DUMPS Tuesday, August 6, 2024 10,57 AM


c. Integrated auditing combines the operational audit function and the IS audit

function.

d. Integrated auditing combines the financial audit function and the IS audit

function - Answer✔️✔️-B. Integrated auditing is a methodology that combines the

operational audit function, the financial audit function, and the IS audit function.

Therefore, Answers C and D are incorrect because they do not list all three types of

functions to be integrated. Answer A is incorrect because it describes control self-

assessment (CSA), which is used to verify the reliability of internal controls and

places internal controls in the hands of management

Which storage of evidence would best preserve the chain of custody of evidence

obtained during an audit?

a. Locked department safe behind card access doors

b. Offsite location, such as home, out of reach by anyone at work

c. Archival at a third-party offsite facility

d. Locked cabinet on the department floor with only one key, in the possession of

the auditor - Answer✔️✔️-D. The best choice would be a locked cabinet on the

department floor with only one key, in the possession of the auditor. With only one

key in the auditor's possession, there is clear accountability, and access is limited to




2

,©PREP4EXAMS 2024/2025 REAL EXAM DUMPS Tuesday, August 6, 2024 10,57 AM


one person. Answer A is incorrect because multiple individuals may still have

access to the safe. Answer B is incorrect because it would call into question the

security of the home and the ability to restrict access to family members. Answer C

is incorrect because third-party access cannot be verified in a third-party site, given

the way the facts were presented.

Which of the following best describes risk that can be caused by the failure of

internal controls and can result in a material error?

a. Residual risk

b. Inherent risk

c. Detection risk


d. Control risk - Answer✔️✔️-D. A control risk is risk caused by failure of internal

controls; it can result in a material error. Answer A is incorrect because residual

risk is the amount of risk the organization is willing to accept. Answer B is

incorrect because inherent risk is the risk that can occur because of the lack of

compensating controls. Combined, inherent risks can create a material risk. Answer

C is incorrect because detection risk is the risk if an auditor does not design tests in

such a way as to detect a material risk




3

, ©PREP4EXAMS 2024/2025 REAL EXAM DUMPS Tuesday, August 6, 2024 10,57 AM


Which of the following is not one of the best techniques for gathering evidence

during an audit?

a. Attend board meetings

b. Examine and review actual procedures and processes

c. Verify employee security awareness training and knowledge


d. Examine reporting relationships to verify segregation of duties - Answer✔️✔️-A.

Attending board meetings is not one of the best ways to gather evidence during an

audit. The best ways to gather evidence include observing employee activity,

examining and reviewing procedures and processes, verifying employee security

awareness training and knowledge, and examining reporting relationships to verify

segregation of duties.

Which of the following is not an advantage of control self-assessment (CSA)?

a. CSA helps provide early detection of risks.

b. CSA is an audit function replacement.

c. CSA reduces control costs.


d. CSA provides increased levels of assurance. - Answer✔️✔️-B. CSA is not an

audit function replacement. Answers A, C, and D are all advantages of CSA.




4

The benefits of buying summaries with Stuvia:

Guaranteed quality through customer reviews

Guaranteed quality through customer reviews

Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.

Quick and easy check-out

Quick and easy check-out

You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.

Focus on what matters

Focus on what matters

Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!

Frequently asked questions

What do I get when I buy this document?

You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.

Satisfaction guarantee: how does it work?

Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.

Who am I buying these notes from?

Stuvia is a marketplace, so you are not buying this document from us, but from seller OliviaWest. Stuvia facilitates payment to the seller.

Will I be stuck with a subscription?

No, you only buy these notes for CA$19.48. You're not tied to anything after your purchase.

Can Stuvia be trusted?

4.6 stars on Google & Trustpilot (+1000 reviews)

79202 documents were sold in the last 30 days

Founded in 2010, the go-to place to buy study notes for 14 years now

Start selling

Recently viewed by you

Summary ·

(1)

Samenvatting Procesmanagement hd 1 t/m 8

CA$19.48
  • (0)
  Add to cart