Interview Questions And Answers Forum

Ibraheem

Webmaster

From: Capital

Registered: 2012-03-16

Posts: 23,140

Website

CISA Interview Questions And Answers

Information technology (IT) :: Certified Information Systems Auditor (CISA) Job Interview Questions and Answers

CISA Interview Questions and Answers will teach you now that Certified Information Systems Auditor (CISA) is a professional certification for information technology audit professionals sponsored by ISACA, formerly the Information Systems Audit and Control Association. Candidates for the certification must meet requirements set by ISACA. So get preparation for the exam and job inter of CISA with this Certified Information Systems Auditor (CISA) Questions with Answers guide

1 ► As updates to an online order entry system are processed, the updates are recorded on a transaction tape and a hard copy transaction log. At the end of the day, the order entry files are backed up on tape. During the backup procedure, a drive malfunctions and the order entry files are lost. Which of the following are necessary to restore these files?
2 ► While designing the business continuity plan (BCP) for an airline reservation system, the MOST appropriate method of data transfer/backup at an offsite location would be:
3 ► Which of the following types of testing would determine whether a new or modified system can operate in its target environment without adversely impacting other existing systems?
4 ► Which of the following risks could result from inadequate software baselining?
5 ► A programmer, using firecall IDs, as provided in the manufactures manual, gained access to the production environment and made an unauthorized change. Which of the following could have prevented this from happening?
6 ► Which of the following is a dynamic analysis tool for the purpose of testing software modules?
7 ► Online banking transactions are being posted to the database when processing suddenly comes to a halt. The integrity of the transaction processing is BEST ensured by:
8 ► A retail company recently installed data warehousing client software at geographically diverse sites. Due to time zone differences between the sites, updates to the warehouse are not synchronized. Which of the following will be affected the MOST?
9 ► An IS auditor reviewing database controls discovered that changes to the database during normal working hours were handled through a standard set of procedures. However, changes made after normal hours required only an abbreviated number of steps. In this situation, which of the following would be considered an adequate set of compensating controls?
10 ► Which of the following represents the GREATEST potential risk in an EDI environment?
11 ► Corrective action has been taken by an auditee immediately after the identification of a reportable finding. The auditor should:
12 ► In a risk-based audit approach, an IS auditor, in addition to risk, would be influenced by:
13 ► The PRIMARY advantage of a continuous audit approach is that it:
14 ► Which of the following is the GREATEST risk of an inadequate policy definition for ownership of data and systems?
15 ► IT control objectives are useful to IS auditors, as they provide the basis for understanding the:
16 ► In reviewing the IS short-range (tactical) plan, the IS auditor should determine whether:
17 ► An IS auditor is performing an audit of a network operating system. Which of the following is a user feature the IS auditor should review?
18 ► An IS auditor is performing a network security review of a telecom company that provides Internet connection services to shopping malls for their wireless customers. The company uses wireless transport layer security (WTLS) and secure socket layers (SSL) technology for protecting their customers payment information. The IS auditor should be MOST concerned, if a hacker:
19 ► An organization provides information to its supply-chain partners and customers through an extranet infrastructure. Which of the following should be the GREATEST concern to an IS auditor reviewing the firewall security architecture?
20 ► Which of the following cryptography options would increase overhead/cost?
21 ► Which of the following acts as a decoy to detect active Internet attacks?
22 ► Which of the following is the MOST effective control when granting temporary access to vendors?
23 ► A certifying authority (CA) can delegate the processes of:
24 ► An organization with extremely high security requirements is evaluating the effectiveness of biometric systems. Which of the following performance indicators is MOST important?
25 ► To develop a successful business continuity plan, end-user involvement is critical during which of the following phases?