Free Access to ISACA.CISA.v2024-03-31.q980 with Valid Practice Test (Page 5)

Question 16

.Which of the following is of greatest concern when performing an IS audit?

A.Users' ability to directly modify the database
B.Users' ability to submit queries to the database
C.Users' ability to indirectly modify the database
D.Users' ability to directly view the database

Question 17

What topology provides the greatest redundancy of routes and the greatest network fault tolerance?

A.A star network topology
B.A mesh network topology with packet forwarding enabled at each host
C.A bus network topology
D.A ring network topology

Question 18

Assessments of critical information systems are based on a cyclical audit plan that has not been updated for several years. Which of the following should the IS auditor recommend to BEST address this situation?

A.Do not include periodic reviews in detail as part of the audit plan.
B.Use a revolving set of audit plans to cover all systems
C.Regularly validate the audit plan against business risks.
D.Update the audit plan quarterly to account for delays and deferrals of period* reviews

Question 19

Which of the following activities should occur after a business impact analysis (BIA)?

A.Identify threats to the IT environment
B.Identify critical applications
C.Analyze recovery options
D.Review the computing and user environment

Question 20

COBIT 5 separates information goals into three sub-dimensions of quality. Which of the following sub- dimension of COBIT 5 describes the extent to which data values are in conformance with the actual true value?

A.Intrinsic quality
B.Contextual and representational quality
C.Security quality
D.Accessibility quality

Correct Answer: A

Explanation/Reference:
Three sub-dimensions of quality in COBIT 5 are as follows:
1. Intrinsic quality - The extent to which data values are in conformance with the actual or true values. It includes
Accuracy - The extent to which information is correct or accurate and reliable Objectivity - The extent to which information is unbiased, unprejudiced and impartial.
Believability - The extent to which information is regarded as true and credible.
Reputation - The extent to which information is highly regarded in terms of its source or content.
2. Contextual and Representational Quality - The extent to which information is applicable to the task of the information user and is presented in an intelligible and clear manner, reorganizing that information quality depends on the context of use. It includes
Relevancy - The extent to which information is applicable and helpful for the task at hand.
Completeness - The extent to which information is not missing and is of sufficient depth and breadth for the task at hand
Currency - The extent to which information is sufficiently up to date for task at hand.
Appropriate amount of information - The extent to which the volume of information is appropriate for the task at hand
Consistent Representation - The extent to which information is presented in the same format.
Interpretability - The extent to which information is in appropriate languages, symbols and units, with clear definitions.
Understandability - The extent to which information is easily comprehended.
Ease of manipulation - The extent to which information is easy to manipulate and apply to different tasks.
3. Security/accessibility quality - The extent to which information is available or obtainable. It includes:
Availability/timeliness - The extent to which information is available when required, or easily available when required, or easily and quickly retrievable.
Restricted Access - The extent to which access to information is restricted appropriately to authorize parties.
The following were incorrect answers:
Contextual and representational quality - The extent to which information is applicable to the task of the information user and is presented in an intelligible and clear manner, reorganizing that information quality depends on the context of use.
Security Quality or Accessibility quality -The extent to which information is available or obtainable.
Following reference(s) were/was used to create this question:
CISA review manual 2014 Page number 310

Question 16

Question 17

Question 18

Question 19

Question 20

Download PDF File