CISA Trivia 5

Question 1

In IS auditing, what is 'sampling risk'?

Accepted Answer

The risk that the auditor's conclusion based on a sample differs from the conclusion if the entire population were examined

Answer

Sampling risk is the possibility that the auditor's sample-based conclusion does not reflect the actual state of the entire population.

Question 2

Which of the following best describes 'data integrity' in information systems?

Accepted Answer

Assurance that data is accurate, complete, and has not been altered without authorization

Answer

Data integrity means data is accurate, complete, consistent, and protected from unauthorized modification.

Question 3

What is the term for the IS audit technique where the auditor processes simulated transactions through a live system to test controls?

Accepted Answer

Integrated test facility (ITF)

Answer

An ITF introduces fictitious test entities and transactions into a production system to verify that controls operate correctly.

Question 4

Which phase of the SDLC presents the greatest opportunity for IS auditors to influence security and control design?

Accepted Answer

Requirements and design

Answer

Auditor involvement during requirements and design is most effective because changes are least costly at this early stage.

Question 5

What is 'patch management' and why is it relevant to IS auditors?

Accepted Answer

The process of applying software updates to fix vulnerabilities, which auditors review for timeliness and completeness

Answer

Patch management involves deploying vendor-issued fixes; auditors assess whether patches are applied promptly to reduce exposure.

CISA - Certified Information Systems Auditor Practice Test