ISACA IT Acquisition, Development, and Implementation 1 — Questions and Answers
Question 1: During a system development project, which SDLC phase is primarily concerned with identifying and documenting business requirements?
- System design
- Requirements analysis (Correct answer)
- System testing
- Implementation
Correct answer: Requirements analysis
Requirements analysis is the phase where business and functional requirements are gathered and documented to ensure the system meets user needs.
Question 2: Which control is MOST important to verify when auditing a change management process?
- All changes are tested directly in production
- Emergency changes bypass authorization controls
- Changes are approved by appropriate authority before implementation (Correct answer)
- Change logs are maintained only for major changes
Correct answer: Changes are approved by appropriate authority before implementation
Authorization by appropriate authority ensures changes are reviewed and approved before implementation, preventing unauthorized modifications.
Question 3: What is the PRIMARY purpose of a post-implementation review (PIR)?
- To identify and remediate security vulnerabilities
- To evaluate whether the system meets its original objectives (Correct answer)
- To train end users on the new system
- To document the technical system architecture
Correct answer: To evaluate whether the system meets its original objectives
A post-implementation review assesses whether the implemented system meets the defined business objectives and performance criteria established before development.
Question 4: In software development, what is the MAIN objective of unit testing?
- Verifying integration between system components
- Testing complete end-to-end business workflows
- Validating individual code modules or functions in isolation (Correct answer)
- Confirming user acceptance of the overall system
Correct answer: Validating individual code modules or functions in isolation
Unit testing validates that individual code modules or functions work correctly in isolation before being integrated with other components.
Question 5: During a feasibility study for a new IT system, which factor relates specifically to TECHNICAL feasibility?
- Whether the project can be completed within budget
- Whether the required technology exists to support the requirements (Correct answer)
- Whether staff have adequate training to use the system
- Whether the system will comply with applicable regulations
Correct answer: Whether the required technology exists to support the requirements
Technical feasibility examines whether the required technology exists or can be developed to meet the stated system requirements.
Question 6: An IS auditor beginning a review of a system acquisition should FIRST examine which document?
- User acceptance test results
- The business case and requirements specification (Correct answer)
- Post-implementation review reports
- System training documentation
Correct answer: The business case and requirements specification
The business case and requirements specification establish the baseline against which all subsequent activities and outcomes are measured.
Question 7: Which testing methodology evaluates system functionality based on inputs and outputs without knowledge of internal code structure?
- White-box testing
- Gray-box testing
- Black-box testing (Correct answer)
- Regression testing
Correct answer: Black-box testing
Black-box testing evaluates system behavior from an external perspective using inputs and outputs, without any knowledge of internal logic or code.
ISACA IT Acquisition, Development, and Implementation 1
During a system development project, which SDLC phase is primarily concerned with identifying and documenting business requirements?