IT Audit & Data Analytics Flashcards
7 cards from real Certified Internal Auditor practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 IT Audit & Data Analytics flashcards as text
During an IT audit, an auditor discovers that database administrators have unrestricted access to modify production data without any logging. Which control deficiency does this BEST represent?
Answer: Lack of privileged access monitoring
Unrestricted, unlogged privileged access to production data represents a lack of privileged access monitoring, a critical IT general control.
An internal auditor is using data analytics to test for duplicate payments. Which technique is MOST appropriate for this objective?
Answer: Fuzzy matching algorithms
Fuzzy matching algorithms detect near-duplicate records even when minor variations exist in vendor names or invoice numbers, making them ideal for duplicate payment testing.
Which of the following is the PRIMARY purpose of an IT application control?
Answer: Provide reasonable assurance that transactions are processed completely and accurately
IT application controls are designed to ensure the completeness, accuracy, and validity of transaction processing within specific applications.
When auditing a cloud computing environment, which risk is MOST unique compared to traditional on-premises environments?
Answer: Dependency on third-party vendor for data sovereignty and security
Cloud environments introduce unique risks around data sovereignty and reliance on third-party providers for security controls that the organization cannot directly manage.
An auditor selects a random sample of 100 transactions from 50,000 using a random number generator. Which sampling method is being used?
Answer: Simple random sampling
Simple random sampling gives every item in the population an equal chance of selection, which is achieved by using a random number generator.
In data analytics, what does the term 'data normalization' refer to in the context of audit analysis?
Answer: Standardizing data formats and scales to enable meaningful comparison
Data normalization involves transforming data into a consistent format and scale so that comparisons and analyses yield meaningful and unbiased results.
Which IT general control category directly addresses the risk of unauthorized changes being made to production programs?
Answer: Change management controls
Change management controls govern how modifications to IT systems are requested, approved, tested, and implemented to prevent unauthorized or untested changes in production.