100% tevredenheidsgarantie Direct beschikbaar na betaling Zowel online als in PDF Je zit nergens aan vast
logo-home
CISA Practise Question Database Questions & 100% Correct Answers €13,16   In winkelwagen

Tentamen (uitwerkingen)

CISA Practise Question Database Questions & 100% Correct Answers

 6 keer bekeken  0 keer verkocht
  • Vak
  • CISA
  • Instelling
  • CISA

The PRIMARY advantage of a continuous audit approach is that it: Select an answer: A. does not require an IS auditor to collect evidence on system reliability while processing is taking place. B. requires the IS auditor to review and follow up immediately on all information collected. C. c...

[Meer zien]

Voorbeeld 4 van de 870  pagina's

  • 9 september 2024
  • 870
  • 2024/2025
  • Tentamen (uitwerkingen)
  • Vragen en antwoorden
  • CISA
  • CISA
avatar-seller
1 | P a g e | © copyright 2024/2025 | Grade A+




CISA Practise Question Database 2013-
2014 Questions & 100% Correct
Answers
The PRIMARY advantage of a continuous audit approach is that it:

Select an answer:

A. does not require an IS auditor to collect evidence on system reliability while

processing is taking place.

B. requires the IS auditor to review and follow up immediately on all information

collected.

C. can improve system security when used in time-sharing environments that

process a large number of transactions.

D. does not depend on the complexity of an organization's computer systems.


✓ :~~ 1.1. The correct answer is C.

The use of continuous auditing techniques can improve system security when used

in time-sharing environments that process a large number of transactions, but

leave a scarce paper trail. Choice A is incorrect since the continuous audit

approach often does require an IS auditor to collect evidence on system reliability

while processing is taking place. Choice B is incorrect since an IS auditor normally

would review and follow up only on material deficiencies or errors detected.

Choice D is incorrect since the use of continuous audit techniques depends on the

complexity of an organization's computer systems.




Master01 | September, 2024/2025 | Latest update

, 2 | P a g e | © copyright 2024/2025 | Grade A+


Which of the following ensures the availability of transactions in the event of a

disaster?

Select an answer:

A. Send tapes hourly containing transactions offsite.

B. Send tapes daily containing transactions offsite.

C. Capture transactions to multiple storage devices.

D. Transmit transactions offsite in real time.


✓ :~~ 4.10. The correct answer is D.

The only way to ensure availability of all transactions is to perform a real-time

transmission to an offsite facility. Choices A and B are not in real time and,

therefore, would not include all the transactions. Choice C does not ensure

availability at an offsite location.




An organization has outsourced its help desk function. Which of the following

indicators would be the BEST to include in the service level agreement (SLA)?

Select an answer:

A. Overall number of users supported

B. Percentage of incidents solved in the first call

C. Number of incidents reported to the help desk

D. Number of agents answering the phones




Master01 | September, 2024/2025 | Latest update

, 3 | P a g e | © copyright 2024/2025 | Grade A+


✓ :~~ 4.2. You are correct, the answer is B.

Since it is about service level (performance) indicators, the percentage of

incidents solved on the first call is the only option that is relevant. Choices A, C

and D are not quality measures of the help desk service.




Which of the following will MOST successfully identify overlapping key controls in

business application systems?

Select an answer:

A. Reviewing system functionalities that are attached to complex business

processes

B. Submitting test transactions through an integrated test facility (ITF)

C. Replacing manual monitoring with an automated auditing solution

D. Testing controls to validate that they are effective

✓ :~~ The correct answer is C.

As part of the effort to realize continuous audit management (CAM), there are

cases for introducing an automated monitoring and auditing solution. All key

controls need to be clearly aligned for systematic implementation; thus, analysts

have the opportunity to come across unnecessary or overlapping key controls in

existing systems. In general, highly complex business processes may have more key

controls than business areas with less complexity; however, finding, with

certainty, unnecessary controls in complex areas is not always possible. If a well-

thought-out key control structure has been established from the beginning, finding

any overlap in control will not be possible. An ITF is an audit technique to test the


Master01 | September, 2024/2025 | Latest update

, 4 | P a g e | © copyright 2024/2025 | Grade A+


accuracy of the processes in the application system. It may find control flaws in

the application system, but it would be difficult to find the overlap in key controls.

By testing controls to validate whether they are effective, the IS auditor can

identify whether there are overlapping controls; however, the process of

implementing an automated auditing solution would better identify overlapping

controls.




Overall business risk for a particular threat can be expressed as:

Select an answer:

A. a product of the likelihood and magnitude of the impact should a threat

successfully exploit a vulnerability.

B. the magnitude of the impact should a threat source successfully exploit the

vulnerability.

C. the likelihood of a given threat source exploiting a given vulnerability.

D. the collective judgment of the risk assessment team.

✓ :~~ 2-8 The correct answer is A.

Choice A takes into consideration the likelihood and magnitude of the impact and

provides the best measure of the risk to an asset. Choice B provides only the

likelihood of a threat exploiting a vulnerability in the asset but does not provide

the magnitude of the possible damage to the asset. Similarly, choice C considers

only the magnitude of the damage and not the possibility of a threat exploiting a

vulnerability. Choice D defines the risk on an arbitrary basis and is not suitable for




Master01 | September, 2024/2025 | Latest update

Voordelen van het kopen van samenvattingen bij Stuvia op een rij:

Verzekerd van kwaliteit door reviews

Verzekerd van kwaliteit door reviews

Stuvia-klanten hebben meer dan 700.000 samenvattingen beoordeeld. Zo weet je zeker dat je de beste documenten koopt!

Snel en makkelijk kopen

Snel en makkelijk kopen

Je betaalt supersnel en eenmalig met iDeal, creditcard of Stuvia-tegoed voor de samenvatting. Zonder lidmaatschap.

Focus op de essentie

Focus op de essentie

Samenvattingen worden geschreven voor en door anderen. Daarom zijn de samenvattingen altijd betrouwbaar en actueel. Zo kom je snel tot de kern!

Veelgestelde vragen

Wat krijg ik als ik dit document koop?

Je krijgt een PDF, die direct beschikbaar is na je aankoop. Het gekochte document is altijd, overal en oneindig toegankelijk via je profiel.

Tevredenheidsgarantie: hoe werkt dat?

Onze tevredenheidsgarantie zorgt ervoor dat je altijd een studiedocument vindt dat goed bij je past. Je vult een formulier in en onze klantenservice regelt de rest.

Van wie koop ik deze samenvatting?

Stuvia is een marktplaats, je koop dit document dus niet van ons, maar van verkoper ExamArsenal. Stuvia faciliteert de betaling aan de verkoper.

Zit ik meteen vast aan een abonnement?

Nee, je koopt alleen deze samenvatting voor €13,16. Je zit daarna nergens aan vast.

Is Stuvia te vertrouwen?

4,6 sterren op Google & Trustpilot (+1000 reviews)

Afgelopen 30 dagen zijn er 79271 samenvattingen verkocht

Opgericht in 2010, al 14 jaar dé plek om samenvattingen te kopen

Start met verkopen

Laatst bekeken door jou


€13,16
  • (0)
  Kopen