CISA Practice Test

CISA Practice Test practice questions, page 73 of 73, with answer review and explanations.

Question 361

Which of the following features of a library control software package would protect against unauthorized updating of source code?

  1. Access controls for source libraries
  2. Date and time stamping of source and object code
  3. Required approvals at each life cycle step
  4. Release-to- release comparison of source code

Question 362

Which of the following security testing techniques is MOST effective in discovering unknown malicious attacks?

  1. Penetration testing
  2. Sandboxing
  3. Vulnerability testing
  4. Reverse engineering

Question 363

Which of the following should be the PRIMARY objective of conducting an audit follow-up of management action plans?

  1. To verify that risks listed in the audit report have been properly mitigated
  2. To ensure senior management is aware of the audit findings
  3. To identify new risks and controls for the organization
  4. To align the management action plans with business requirements

Question 364

Which of the following is the BEST use of a balanced scorecard when evaluating IT performance?

  1. Determining compliance with relevant regulatory requirements
  2. Monitoring alignment of IT with the rest of the organization
  3. Evaluating implementation of the business strategy
  4. Monitoring alignment of the IT project portfolio to budget