Home > Class 11 Biology > Quizzes > CISA: Certified Information Systems Auditor
CISA: Certified Information Systems Auditor
Fast practice, instant feedback. Timer auto-submits when time’s up.
Avg score: 82% Most missed: “Focuses on:”
CISA: Certified Information Systems Auditor
Time left 00:00
25 Questions

1. (1.) Executive Summary (2.) Framework (3.) Reporting to External Parties (4.) Evaluation Tools

2. Concerns the reliability of data transfer between systems. (1.) Connection Oriented (2.) Guaranteed Delivery (3.) Order of Delivery

3. Information is arranged in frames and transported across the medium. Collision detection. Checksum verification of delivery.

4. The inventory of all in-scope business processes and systems

5. A representation of how closely a sample represents an entire population.

6. An estimate that expresses the percent of errors or exceptions that may exist in an entire population

7. Individual events may often create combined threats to enterprise operations: A tornado might also spawn ____________________.

8. An auditor has detected potential fraud while testing a control objective - He should ___________________. Because Audit committee members are generally not involved in business operations - they will be sufficiently remove from the matter - and they

9. A sampling technique used to study the characteristics of a population to determine how many samples possess a specific characteristic.

10. In Release Management - _________________ means that each step of the release process undergoes formal review and approval before the next step is allowed to begin.

11. What three elements allow validation of business practices against acceptable measures of regulatory compliance - performance - and standard operational guidelines.

12. An audit of an accounting system - accounting department processes - and procedures to determine if business controls are sufficient to ensure the integrity of financial statements.

13. An audit that is performed in support of an anticipated or active legal proceeding.

14. (1.) Authentication (2.) Authorization (3.) Change Management (4.) Completeness checks (5.) Validation checks (6.) Input controls (7.) Output controls (8.) Problem management (9.) Identification/access controls

15. PERT: shows the ______________ critical path.

16. Used for several types of system changes: (1.) Incidents and problem resolution (bug fixes.) (2.) Enhancements (new functionality.) (3.) Subsystem patches and changes (require testing similar to when changes are made to the application itself.)

17. The risk that an IS auditor will overlook errors or exceptions during an audit.

18. A technique that is used to identify the most critical path in a project to understand which tasks are most likely to affect the project schedule.

19. 1.) Executive Support (2.) Well-defined roles and responsibilities.

20. The annual expected loss to an asset. It is calculated as the single loss expectancy (SLE) X the annualized rate of occurrence (ARO.)

21. (1.) Utility (DNS - SNMP - DHCP (2.) Messaging protocols (SMTP) (3.) Data Transfer protocols (NFS - FTP) (4.) Interactive protocols (Telnet)

22. The maximum period of downtime for a process or application

23. (1.) Access controls (2.) Encryption (3.) Audit logging

24. The IS auditor should conduct a risk assessment first to determine which areas have highest risk. She should devote more testing resources to those high-risk areas.

25. (1.) TCP (2.) UDP