CISA Practice Test

CISA Practice Test practice questions, page 63 of 73, with answer review and explanations.

Question 311

Coding standards provide which of the following?

  1. Access control tables
  2. Data flow diagrams
  3. Field naming conventions
  4. Program documentation

Question 312

During which IT project phase is it MOST appropriate to conduct a benefits realization analysis?

  1. Post-implementation review phase
  2. Design review phase
  3. User acceptance testing (UAT) phase
  4. Final implementation phase

Question 313

Due to a high volume of customer orders, an organization plans to implement a new application for customers to use for online ordering. Which type of testing is MOST important to ensure the security of the application prior to go-live?

  1. Stress testing
  2. User acceptance testing (UAT)
  3. Vulnerability testing
  4. Regression testing

Question 314

During an audit of identity and access management, an IS auditor finds that the engagement audit plan does not include the testing of controls that regulate access by third parties. Which of the following would be the auditor's BEST course of action?

  1. Add testing of third-party access controls to the scope of the audit.
  2. Plan to test these controls in another audit.
  3. Determine whether the risk has been identified in the planning documents.
  4. Escalate the deficiency to audit management.

Question 315

What is the PRIMARY reason for conducting a risk assessment when developing an annual IS audit plan?

  1. Identify and prioritize audit areas
  2. Determine the existence of controls in audit areas
  3. Provide assurance material items will be covered
  4. Decide which audit procedures and techniques to use