Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 591–595 (page: 120)

Updated On: 10-Feb-2026

An IS auditor performing a review of a newly purchased software program notes that an escrow agreement has been executed for acquiring the source code.
What is MOST important for the IS auditor to verify?

  1. The source code is being held by an independent third party.
  2. Product acceptance testing has been completed.
  3. The vendor is financially viable.
  4. The source code is being updated for each change.

Answer(s): A



An IS auditor notes the transaction processing times in an order processing system have significantly increased after a major release. Which of the following should the IS auditor review FIRST?

  1. Capacity management plan
  2. Stress testing results
  3. Training plans
  4. Database conversion results

Answer(s): A



An IS auditor is executing a risk-based IS audit strategy to ensure that key areas are audited. Which of the following should be of GREATEST concern to the auditor?

  1. The risk assessment database does not include a complete audit universe.
  2. The risk assessment methodology does not permit the collection of financial audit data.
  3. The risk assessment methodology relies on subjective audit judgments at certain points of the process.
  4. The risk assessment approach has not been approved by the risk manager.

Answer(s): C



An IS auditor is assigned to review the IS department's quality procedures. Upon contacting the IS manager, the auditor finds that there is an informal unwritten set of standards. Which of the following should be the auditor's NEXT action?

  1. Finalize the audit and report the finding.
  2. Document and test compliance with the informal standards.
  3. Postpone the audit until IS management implements written standards.
  4. Make recommendations to IS management as to appropriate quality standards.

Answer(s): D



An IS auditor will be testing accounts payable controls by performing data analytics on the entire population of transactions. Which of the following is MOST important for the auditor to confirm when sourcing the population data?

  1. The data analysis tools have been recently updated.
  2. The data can be obtained in a timely manner.
  3. There is no privacy information in the data.
  4. The data is taken directly from the system.

Answer(s): D



Viewing page 120 of 366
Viewing questions 596 - 600 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!