Free Access to ISACA.CISA.v2024-03-31.q980 with Valid Practice Test (Page 133)

Question 656

Controls related to authorized modifications to production programs are BEST tested by:

A.testing only the authorizations to implement the new program.
B.tracing modifications from the executable program back to the original request for change.
C.reviewing only the actual lines of source code changed in the program.
D.tracing modifications from the original request for change forward to the executable program.

Question 657

What is the PRIMARY purpose of performing a parallel run of a now system?

A.To train the end users and supporting staff on the new system
B.To verify the new system provides required business functionality
C.To reduce the need for additional testing
D.To validate the new system against its predecessor

Correct Answer: D

Explanation
The primary purpose of performing a parallel run of a new system is to validate the new system against its predecessor. A parallel run is a strategy for system changeover where a new system slowly assumes the roles of the older system while both systems operate simultaneously. This allows for comparison of the results and outputs of both systems to ensure that the new system is working correctly and reliably. A parallel run can also help identify and resolve any errors, discrepancies, or inconsistencies in the new system before the old system is discontinued.
The other options are not the primary purpose of performing a parallel run of a new system. A. To train the end users and supporting staff on the new system. Training is an important part of system implementation, but it is not the main reason for doing a parallel run. Training can be done before, during, or after the parallel run, depending on the needs and preferences of the organization. B. To verify the new system provides required business functionality. Verifying the business functionality of the new system is part of user acceptance testing (UAT), which is a formal and structured process of testing whether the new system meets the specifications and expectations of the users and stakeholders. UAT is usually done before the parallel run, as a prerequisite for system changeover. C. To reduce the need for additional testing. Reducing the need for additional testing is not the primary purpose of performing a parallel run, but rather a possible benefit or outcome of doing so. A parallel run can help ensure that the new system is thoroughly tested and validated in a real-world environment, which may reduce the likelihood of encountering major issues or defects later on. However, additional testing may still be needed after the parallel run, depending on the feedback and evaluation of the users and stakeholders.
References:
ISACA, CISA Review Manual, 27th Edition, 2019, p. 2471
IS

Question 658

Everything not explicitly permitted is forbidden has which of the following kinds of tradeoff?

A.it improves security at a cost in functionality.
B.it improves functionality at a cost in security.
C.it improves security at a cost in system performance.
D.it improves performance at a cost in functionality.
E.None of the choices.

Question 659

During the collection of forensic evidence, which of the following actions would MOST likely result in the destruction or corruption of evidence on a compromised system?

A.Dumping the memory content to a file
B.Generating disk images of the compromised system
C.Rebooting the system
D.Removing the system from the network

Question 660

Which of the following is MOST important to include in forensic data collection and preservation procedures?

A.Maintaining chain of custody
B.Determining tools to be used
C.Assuring the physical security of devices
D.Preserving data integrity

Question 656

Question 657

Question 658

Question 659

Question 660

Download PDF File