Free CISA Exam Braindumps
Certified Information Systems Auditor Questions 616–620 (page: 125)

Updated On: 10-Feb-2026

Which of the following is the BEST method to maintain an audit trail of changes made to the source code of a program?

  1. Standardize file naming conventions.
  2. Utilize automated version control.
  3. Embed details within source code.
  4. Document details on a change register.

Answer(s): B



Which of the following is MOST likely to be detected by an IS auditor applying data analytic techniques?

  1. Issues resulting from an unsecured application automatically uploading transactions to the general ledger
  2. Unauthorized salary or benefit changes to the payroll system generated by authorized users
  3. Potentially fraudulent invoice payments originating within the accounts payable department
  4. Completion of inappropriate cross-border transmission of personally identifiable information (PII)

Answer(s): C



An IS auditor is planning an audit of an organization's accounts payable processes. Which of the following controls is MOST important to assess in the audit?

  1. Segregation of duties between issuing purchase orders and making payments
  2. Management review and approval of purchase orders
  3. Management review and approval of authorization tiers
  4. Segregation of duties between receiving invoices and setting authorization limits

Answer(s): A



An IS auditor discovers that due to resource constraints, a database administrator (DBA) is responsible for developing and executing changes into the production environment. Which of the following should the auditor do FIRST?

  1. Ensure a change management process is followed prior to implementation.
  2. Identify whether any compensating controls exist.
  3. Determine whether another database administrator (DBA) could make the changes.
  4. Report a potential segregation of duties (SoD) violation.

Answer(s): B



An IS auditor is reviewing logical access controls for an organization's financial business application. Which of the following findings should be of GREATEST concern to the auditor?

  1. Management does not review application user activity logs.
  2. Password length is set to eight characters.
  3. User accounts are shared between users.
  4. Users are not required to change their passwords on a regular basis.

Answer(s): C



Viewing page 125 of 366
Viewing questions 621 - 625 out of 1823 questions


Post your Comments and Discuss ISACA CISA exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!