NEW
Font size
WorksheetsCISA Quiz
Total questions: 10
Worksheet time: 5mins
Which of the following BEST demonstrates that IT strategy is aligned with organizational goals and objectives?
Business stakeholders are involved in approving the IT strategy
Organizational strategies are communicated to the chief information officer (CIO)
IT strategies are communicated to all business stakeholders
The chief information office (CIO) is involved in approving the organizational strategies
A database audit reveals an issue with the way data ownership for client data is defined. Which of the following roles should be accountable for this finding?
Business management
Database administrator (DBA)
Information security management
Privacy manager
Regression testing should be used during a system development project to ensure that:
errors have not been introduced to the system during modification
the results of testing are statistically valid
system testing will address high-probability errors
the test plan is based on an analysis of the impact of past testing
An organization plans to receive an automated data feed into its enterprise data warehouse from a third-party service provider. Which of the following would be the BEST way to prevent accepting bad data?
Appoint data quality champions across the organization
Purchase data cleansing tools from a reputable vendor
Obtain error codes indicating failed data feeds
Implement business rules to reject invalid data
The decision to accept an IT control risk related to data quality should be the responsibility of the:
IS audit manager
Business owner
Chief Information Officer (CIO)
Information Security Team
Which of the following is the PRIMARY benefit of using a capability maturity model?
It provides a way to compare against similar organizations' maturity levels
It helps the organization estimate how long it will take to reach the highest level of maturity in each area
It helps the organization develop a roadmap toward its desired level of maturity in each area
It provides detailed change management strategies for performance improvement
The PRIMARY objective of conducting a post-implementation review is to:
Determine if project management methodology was applied consistently
Verify that the information system meets the intended objectives
Determine if testing documentation was sufficient
Allow employees to provide feedback on the information system
Which of the following findings should be of GREATEST concern to an IS auditor reviewing the effectiveness of an organization's problem management practices?
Problem records are prioritized based on the impact of incidents
Root causes are not adequately identified
Some incidents are closed without problem resolution
Problems are frequently escalated to management for solution
Which of the following IS functions can be performed by the same group or individual while still providing the proper segregation of duties?
Database administration and computer operations
Computer operations and application programming
Security administration and application programming
Application programming and system analysis
During a review of operations, it is noted that during a batch update, an error was detected and the database initiated a roll-back. An IT operator stopped the roll-back and re-initiated the update. What should the operator have done PRIOR to re-initiating the update?
Determined the cause of the error
Allowed the roll-back to complete
Obtained approval before re-initiating the update
Scheduled the roll-back for a later time
