CISA System Development and Implementation 2

Question 1

During a post-implementation review, an IS auditor finds that user acceptance testing (UAT) was bypassed due to project deadline pressure. What is the PRIMARY risk?

Accepted Answer

Undiscovered defects may reach production

Answer

Budget overruns in future phases

Answer

Development team morale decreases

Answer

Project documentation becomes incomplete

Question 2

Which SDLC phase is MOST concerned with translating business requirements into technical specifications?

Accepted Answer

Systems design

Answer

Feasibility study

Answer

Programming and testing

Answer

Implementation

Question 3

An IS auditor is reviewing a change management process. Which control BEST ensures only authorized changes reach production?

Accepted Answer

Segregation of duties between developers and production migration staff

Answer

Automated code compilation logs

Answer

Mandatory code comments in all programs

Answer

Weekly status meetings with the project manager

Question 4

What does a Gantt chart PRIMARILY help an IS auditor assess during a systems development review?

Accepted Answer

Project schedule and milestone adherence

Answer

Code quality and defect density

Answer

Budget variance and cost overruns

Answer

Vendor contract compliance

Question 5

During testing, a developer discovers a critical defect but the project manager instructs the team to proceed to production anyway. The IS auditor's BEST response is to:

Accepted Answer

Document the risk and escalate to senior management

Answer

Immediately shut down the project

Answer

Accept the decision since it is management's prerogative

Answer

Rewrite the affected module independently

Question 6

Which testing type validates that a new system does not adversely affect existing integrated systems?

Accepted Answer

Regression testing

Answer

Unit testing

Answer

Stress testing

Answer

Parallel testing

Question 7

An organization migrates to a new ERP system using a phased approach. The PRIMARY advantage of this strategy over a big-bang cutover is:

Accepted Answer

Reduced disruption and ability to isolate issues by module

Answer

Lower total project cost

Answer

Faster overall implementation timeline

Answer

Elimination of data conversion requirements