QUESTION: 313

Due to a high volume of customer orders, an organization plans to implement a new application for customers to use for online ordering. Which type of testing is
MOST important to ensure the security of the application prior to go-live?

Stress testing
User acceptance testing (UAT)
Vulnerability testing
Regression testing

Answer(s): C

Show Answer Next Question

QUESTION: 314

During an audit of identity and access management, an IS auditor finds that the engagement audit plan does not include the testing of controls that regulate access by third parties. Which of the following would be the auditor's BEST course of action?

Add testing of third-party access controls to the scope of the audit.
Plan to test these controls in another audit.
Determine whether the risk has been identified in the planning documents.
Escalate the deficiency to audit management.

Answer(s): C

Show Answer Next Question

QUESTION: 315

What is the PRIMARY reason for conducting a risk assessment when developing an annual IS audit plan?

Identify and prioritize audit areas
Determine the existence of controls in audit areas
Provide assurance material items will be covered
Decide which audit procedures and techniques to use

Answer(s): A

Show Answer Next Question

QUESTION: 316

An employee transfers from an organization's risk management department to become the lead IS auditor. While in the risk management department, the employee helped develop the key performance indicators (KPIs) now used by the organization. Which of the following would pose the GREATEST threat to the independence of this auditor?

Evaluating the effectiveness of IT risk management processes
Recommending controls to address the IT risks identified by KPIs
Developing KPIs to measure the internal audit team
Training the IT audit team on IT risk management processes

Answer(s): B

Show Answer Next Question

Free ISACA CISA Exam Braindumps (page: 80)

QUESTION: 313

QUESTION: 314

QUESTION: 315

QUESTION: 316

CISA Exam Discussions & Posts