QUESTION: 293

A data analytics team has developed a process automation bot for internal audit that scans user access to all servers in the environment and then randomly selects a sample of new users for testing. Which of the following presents the GREATEST concern with this approach?

The bot can only select samples from the current period.
Auditor judgment is removed from the process.
Evidence of population completeness is not maintained.
Data must be validated manually before being loaded into the bot.

Answer(s): C

Show Answer Next Question

QUESTION: 294

What is the MOST critical finding when reviewing an organization's information security management?

No official charter for the information security management system
No employee awareness training and education program
No dedicated security officer
No periodic assessments to identify threats and vulnerabilities

Answer(s): A

Show Answer Next Question

QUESTION: 295

The operations team of an organization has reported an IS security attack. Which of the following should be the FIRST step for the security incident response team?

Report results to management.
Document lessons learned.
Perform a damage assessment.
Prioritize resources for corrective action.

Answer(s): C

Show Answer Next Question

QUESTION: 296

A company converted its payroll system from an external service to an internal package. Payroll processing in April was run in parallel. To validate the completeness of data after the conversion, which of the following comparisons from the old to the new system would be MOST effective?

Cut-off dates and overwrites for a sample of employees
Turnaround time for payroll processing
Master file employee data to payroll journals
Employee counts and year-to-date payroll totals

Answer(s): C

Show Answer Next Question

Free ISACA CISA Exam Braindumps (page: 75)

QUESTION: 293

QUESTION: 294

QUESTION: 295

QUESTION: 296

CISA Exam Discussions & Posts