QUESTION: 257

An algorithm in an email program analyzes traffic to quarantine emails identified as spam. The algorithm in the program is BEST characterized as which type of control?

Detective
Directive
Preventive
Corrective

Answer(s): C

Show Answer Next Question

During the implementation of a new system, an IS auditor must assess whether certain automated calculations comply with the regulatory requirements. Which of the following is the BEST way to obtain this assurance?

Re-perform the calculation with audit software.
Review the source code related to the calculation.
Review sign-off documentation.
Inspect user acceptance test (UAT) results.

Answer(s): A

Show Answer Next Question

QUESTION: 259

When testing the adequacy of tape backup procedures, which step BEST verifies that regularly scheduled backups are timely and run to completion?

Reviewing a sample of system-generated backup logs
Interviewing key personnel involved in the backup process
Observing the execution of a daily backup run
Evaluating the backup policies and procedures

Answer(s): A

Show Answer Next Question

QUESTION: 260

During the planning stage of a compliance audit, an IS auditor discovers that a bank's inventory of compliance requirements does not include recent regulatory changes related to managing data risk. What should the auditor do FIRST?

Ask management why the regulatory changes have not been included.
Report the missing regulatory updates to the chief information officer (CIO).
Discuss potential regulatory issues with the legal department.
Exclude recent regulatory changes from the audit scope.

Answer(s): A

Show Answer Next Question

Free ISACA CISA Exam Braindumps (page: 66)

QUESTION: 257

QUESTION: 258

QUESTION: 259

QUESTION: 260

CISA Exam Discussions & Posts