CISA System Development and Implementation 4

Question 1

Which of the following is the PRIMARY objective of a structured walkthrough during system development?

Accepted Answer

Peer review of code or design to identify defects early

Answer

Structured walkthroughs are formal peer review sessions designed to detect errors in design, code, or documentation before they propagate to later phases.

Question 2

An IS auditor reviewing system documentation finds that no operations manual exists for a newly implemented system. The PRIMARY concern is:

Accepted Answer

Operations staff may be unable to maintain or recover the system properly

Answer

Without an operations manual, staff lack the guidance needed for routine operations, troubleshooting, and disaster recovery, increasing operational risk.

Question 3

During application testing, what is the MAIN purpose of boundary value analysis?

Accepted Answer

Testing input values at the edges of valid ranges where defects are most likely

Answer

Boundary value analysis tests values at, just below, and just above defined input limits, where programming errors are most commonly found.

Question 4

A company outsources its application development to a third-party vendor. Which control is MOST important for the IS auditor to verify?

Accepted Answer

Contractual rights to audit the vendor and review deliverables

Answer

Contractual audit rights ensure the organization retains oversight of vendor activities, code quality, and security practices throughout the engagement.

Question 5

The MOST effective control to prevent SQL injection vulnerabilities in a newly developed web application is:

Accepted Answer

Using parameterized queries and input validation in application code

Answer

Parameterized queries separate SQL logic from user-supplied data, preventing malicious input from being interpreted as SQL commands.

CISA - Certified Information Systems Auditor Practice Test

CISA - Certified Information Systems Auditor Practice Test

CISA System Development and Implementation 4