CISA Practice Test

CISA Practice Test practice questions, page 69 of 73, with answer review and explanations.

Question 341

Internal audit is conducting an audit of customer transaction risk. Which of the following would be the BEST reason to use data analytics?

  1. Transactional data is contained in multiple discrete systems that have varying levels of reliability.
  2. Anomalies and risk trends in the data set have yet to be defined.
  3. The audit is being performed to comply with regulations requiring periodic random sample testing.
  4. The audit focus is on a small number of predefined high-risk transactions.

Question 342

Critical processes are not defined in an organization's business continuity plan (BCP). Which of the following would have MOST likely identified the gap?

  1. Updating the risk register
  2. Reviewing the business continuity strategy
  3. Reviewing the business impact analysis (BIA)
  4. Testing the incident response plan

Question 343

When auditing the closing stages of a system development project, which of the following should be the MOST important consideration?

  1. Rollback procedures
  2. Control requirements
  3. User acceptance test (UAT) results
  4. Functional requirements documentation

Question 344

Following a breach, what is the BEST source to determine the maximum amount of time before customers must be notified that their personal information may have been compromised?

  1. Industry standards
  2. Information security policy
  3. Incident response plan
  4. Industry regulations

Question 345

A client/server configuration will:

  1. optimize system performance by having a server on a front-end and clients on a host.
  2. enhance system performance through the separation of front-end and back-end processes.
  3. keep track of all the clients using the IS facilities of a service organization.
  4. limit the clients and servers' relationship by limiting the IS facilities to a single hardware system.