stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CISA - Domain 3 Flashcards | StudBud
Explore
/
CISA - Domain 3
CISA - Domain 3
26 terms
·
StudBud Administration
·
240 plays
Imported from external platform
Flashcards
26 cards
F
Practice quiz
P
Host live
L
Questions
26
Answers
1
In the reengineering process to optimize IT infrastructure, which will
BEST
identify the issues to be resolved?
Self-assessment
Reverse engineering
Prototyping
Gap analysis
2
When implementing an application software package, which of the following presents the
GREATEST
risk?
Uncontrolled multiple software versions
Source programs that are not synchronized with object code
Incorrectly set parameters
Programming errors
3
The
MAIN
purpose of a transaction audit trail is to
reduce the use of storage media.
determine accountability and responsibility for processed transactions.
help an IS auditor trace transactions.
provide useful information for capacity planning.
4
During which phase of software application testing should an organization perform the testing of architectural design?
Unit testing
Acceptance testing
Integration testing
System testing
5
During which of the following phases in system development would user acceptance test plans normally be prepared?
Feasibility study
Requirements definition
Implementation planning
Postimplementation review
6
The
MAJOR
consideration for an IS auditor reviewing an organization's IT project portfolio is the
investment plan.
business plan.
existing IT environment.
IT budget.
7
Which should be included in a feasibility study for a project to implement an electronic data interchange process?
The detailed internal control procedures
The necessary communication protocols
The encryption algorithm format
The proposed trusted third-party agreement
8
An organization implements a new system to replace a legacy system. Which conversion practice creates the
GREATEST
risk?
Direct cutover
Pilot
Phased
Parallel
9
Which of the following is the
PRIMARY
purpose for conducting parallel testing?
To ensure the new system meets user requirements
To enable comprehensive unit and system testing
To highlight errors in the program interfaces with files
To determine whether the system is cost-effective
10
Which of the following is the
MOST
likely benefit of implementing a standardized infrastructure?
Improved cost-effectiveness of IT service delivery and operational support
Reduced need for testing future application changes
Reduced level of investment in the IT infrastructure
Increased security of the IT service delivery center
11
By evaluating application development projects against the CMM model, an auditor should be able to verify that
reliable products are guaranteed.
predictable software processes are followed.
programmers' efficiency is improved.
security requirements are designed.
12
An advantage of using sanitized live transactions in test data is that
test transactions are representative of live processing.
every error condition is likely to be tested.
all transaction types will be included.
no special routines are required to assess the results.
13
The
GREATEST
advantage of rapid application development over the traditional system development life cycle is that it
shortens the development time frame.
allows early testing of technical features.
facilitates user involvement.
facilitates conversion to the new system.
14
Ideally, stress testing should be carried out in a
test environment using live workloads.
production environment using test data.
test environment using test data.
production environment using live workloads.
15
Which of the following is an advantage of the top-down approach to software testing?
Testing can be started before all programs are complete.
It is more effective than other testing approaches.
Errors in critical modules are detected sooner.
Interface errors are identified early.
16
Which is
MOST
relevant to an IS auditor evaluating how the project manager has monitored the progress of the project?
Function point analysis
Critical path diagrams
Gantt charts
Program evaluation review technique diagrams
17
Which of the following
BEST
helps ensure that deviations from the project plan are identified?
Project performance criteria
A project resource plan
A project management framework
A project management approach
18
Following good practices, formal plans for implementation of new information systems are developed during the
deployment phase.
development phase.
testing phase.
design phase.
19
An advantage in using a bottom-up vs. a top-down approach to software testing is that
confidence in the system is achieved earlier.
major functions and processing are tested earlier.
errors in critical modules are detected earlier.
interface errors are detected earlier.
20
Assignment of process ownership is essential in system development projects because it
optimizes the design cost of user acceptance test cases.
enables the tracking of the development completion percentage.
ensures that system design is based on business needs.
minimizes the gaps between requirements and functionalities.
21
Which of the following should an IS auditor be
MOST
concerned about in a financial application?
Programmers have access to the production database.
Secondary controls are documented for identified role conflicts.
Programmers have access to source code in user acceptance test environment
The information security officer does not authorize all application changes
22
Which should be included in a feasibility study for a project to implement an electronic data interchange process?
The encryption algorithm format
The necessary communication protocols
The detailed internal control procedures
The proposed trusted third-party agreement
23
Which of the following
BEST
helps an IS auditor assess and measure the value of a newly implemented system?
System certification
Review of business requirements
Post-implementation review
System accreditation
24
When a new system is to be implemented within a short time frame, it is
MOST
important to
finish writing user manuals.
add last-minute enhancements to functionalities.
ensure that the code has been documented and reviewed.
perform user acceptance testing.
25
During the system testing phase of an application development project the IS auditor should review the
program change requests.
error reports.
conceptual design specifications.
vendor contract.
26
Which of the following helps an IS auditor evaluate the quality of new software that is developed and implemented?
The overall mean time to repair failures
The first report of the mean time between failures
The reporting of the mean time between failures over time
The overall response time to correct failures
