ISACA IT Acquisition, Development, and Implementation

Question 1

During a system development project, which SDLC phase is primarily concerned with identifying and documenting business requirements?

Accepted Answer

Requirements analysis

Answer

System design

Answer

System testing

Answer

Implementation

Question 2

Which control is MOST important to verify when auditing a change management process?

Accepted Answer

Changes are approved by appropriate authority before implementation

Answer

All changes are tested directly in production

Answer

Emergency changes bypass authorization controls

Answer

Change logs are maintained only for major changes

Question 3

What is the PRIMARY purpose of a post-implementation review (PIR)?

Accepted Answer

To evaluate whether the system meets its original objectives

Answer

To identify and remediate security vulnerabilities

Answer

To train end users on the new system

Answer

To document the technical system architecture

Question 4

In software development, what is the MAIN objective of unit testing?

Accepted Answer

Validating individual code modules or functions in isolation

Answer

Verifying integration between system components

Answer

Testing complete end-to-end business workflows

Answer

Confirming user acceptance of the overall system

Question 5

During a feasibility study for a new IT system, which factor relates specifically to TECHNICAL feasibility?

Accepted Answer

Whether the required technology exists to support the requirements

Answer

Whether the project can be completed within budget

Answer

Whether staff have adequate training to use the system

Answer

Whether the system will comply with applicable regulations

Question 6

An IS auditor beginning a review of a system acquisition should FIRST examine which document?

Accepted Answer

The business case and requirements specification

Answer

User acceptance test results

Answer

Post-implementation review reports

Answer

System training documentation

Question 7

Which testing methodology evaluates system functionality based on inputs and outputs without knowledge of internal code structure?

Accepted Answer

Black-box testing

Answer

White-box testing

Answer

Gray-box testing

Answer

Regression testing