CISA IT Audit Standards and Frameworks 2

Question 1

In COBIT 2019, which governance domain is responsible for evaluating stakeholder needs and setting strategic direction for IT?

Accepted Answer

EDM — Evaluate, Direct and Monitor

Answer

APO — Align, Plan and Organize

Answer

DSS — Deliver, Service and Support

Answer

MEA — Monitor, Evaluate and Assess

Question 2

ISO 27002 serves which purpose in relation to ISO 27001?

Accepted Answer

It provides a code of practice with guidance on information security controls

Answer

It specifies mandatory ISMS requirements

Answer

It defines IT governance principles for executives

Answer

It establishes risk management requirements

Question 3

Under ISACA's IS audit standards, an IS auditor's independence is described in which two forms?

Accepted Answer

Organizational independence and professional independence

Answer

Technical independence and managerial independence

Answer

Operational independence and strategic independence

Answer

Internal independence and external independence

Question 4

The NIST Cybersecurity Framework (CSF) is built around which five core functions?

Accepted Answer

Identify, Protect, Detect, Respond, Recover

Answer

Plan, Do, Check, Act, Improve

Answer

Assess, Design, Implement, Monitor, Review

Answer

Govern, Manage, Operate, Secure, Report

Question 5

In COBIT 2019, capability levels range from 0 to 5. What does a capability level of 0 indicate?

Accepted Answer

The process does not exist or fails to achieve its purpose

Answer

The process is fully optimized

Answer

The process is managed and measurable

Answer

The process is defined but not yet implemented

Question 6

The concept of 'due professional care' in IS auditing requires that an auditor:

Accepted Answer

Apply the care and skill expected of a reasonably prudent IS auditor

Answer

Guarantee the accuracy of all findings and conclusions

Answer

Always issue a qualified audit opinion

Answer

Complete the audit within a budget-specified timeframe

Question 7

ISO 20000 is the international standard for which domain?

Accepted Answer

IT service management

Answer

Information security management

Answer

Risk management processes

Answer

Business continuity management