IT Acquisition, Development, and Implementation Flashcards
7 cards from real ISACA practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 IT Acquisition, Development, and Implementation flashcards as text
During a system development project, which SDLC phase is primarily concerned with identifying and documenting business requirements?
Answer: Requirements analysis
Requirements analysis is the phase where business and functional requirements are gathered and documented to ensure the system meets user needs.
Which control is MOST important to verify when auditing a change management process?
Answer: Changes are approved by appropriate authority before implementation
Authorization by appropriate authority ensures changes are reviewed and approved before implementation, preventing unauthorized modifications.
What is the PRIMARY purpose of a post-implementation review (PIR)?
Answer: To evaluate whether the system meets its original objectives
A post-implementation review assesses whether the implemented system meets the defined business objectives and performance criteria established before development.
In software development, what is the MAIN objective of unit testing?
Answer: Validating individual code modules or functions in isolation
Unit testing validates that individual code modules or functions work correctly in isolation before being integrated with other components.
During a feasibility study for a new IT system, which factor relates specifically to TECHNICAL feasibility?
Answer: Whether the required technology exists to support the requirements
Technical feasibility examines whether the required technology exists or can be developed to meet the stated system requirements.
An IS auditor beginning a review of a system acquisition should FIRST examine which document?
Answer: The business case and requirements specification
The business case and requirements specification establish the baseline against which all subsequent activities and outcomes are measured.
Which testing methodology evaluates system functionality based on inputs and outputs without knowledge of internal code structure?
Answer: Black-box testing
Black-box testing evaluates system behavior from an external perspective using inputs and outputs, without any knowledge of internal logic or code.