Free CISA Exam Braindumps (page: 20)

Page 20 of 457

Due to limited storage capacity, an organization has decided to reduce the actual retention period for media containing completed low-value transactions. Which of the following is MOST important for the organization to ensure?

  1. The policy includes a strong risk-based approach.
  2. The retention period complies with data owner responsibilities.
  3. The retention period allows for review during the year-end audit.
  4. The total transaction amount has no impact on financial reporting.

Answer(s): B



Which of the following should an IS auditor be MOST concerned with during a post-implementation review?

  1. The system does not have a maintenance plan.
  2. The system contains several minor defects.
  3. The system deployment was delayed by three weeks.
  4. The system was over budget by 15%.

Answer(s): A



Which of the following is the PRIMARY basis on which audit objectives are established?

  1. Audit risk
  2. Consideration of risks
  3. Assessment of prior audits
  4. Business strategy

Answer(s): B



An IS auditor is following up on prior period items and finds management did not address an audit finding. Which of the following should be the IS auditor's NEXT course of action?

  1. Note the exception in a new report as the item was not addressed by management.
  2. Interview management to determine why the finding was not addressed.
  3. Recommend alternative solutions to address the repeat finding.
  4. Conduct a risk assessment of the repeat finding.

Answer(s): B






Post your Comments and Discuss ISACA CISA exam with other Community members:

CISA Exam Discussions & Posts