Inspirational journeys

Follow the stories of academics and their research expeditions

CISA—Certified Information Systems Auditor - Part 131

Mary Smith

Sat, 24 May 2025

CISA—Certified Information Systems Auditor - Part 131

1. A call-back system requires that a user with an id and password call a remote server through a dial-up line, then the server disconnects and:

A) dials back to the user machine based on the user id and password using a telephone number from its database.
B) dials back to the user machine based on the user id and password using a telephone number provided by the user during this connection.
C) waits for a redial back from the user machine for reconfirmation and then verifies the user id and password using its database.
D) waits for a redial back from the user machine for reconfirmation and then verifies the user id and password using the sender's database.



2. Structured programming is BEST described as a technique that:

A) provides knowledge of program functions to other programmers via peer reviews.
B) reduces the maintenance time of programs by the use of small-scale program modules.
C) makes the readable coding reflect as closely as possible the dynamic execution of the program.
D) controls the coding and testing of the high-level functions of the program in the development process.



3. Which of the following data validation edits is effective in detecting transposition and transcription errors?

A) Range check
B) Check digit
C) Validity check
D) Duplicate check



4. An offsite information processing facility having electrical wiring, air conditioning and flooring, but no computer or communications equipment is a:

A) cold site.
B) warm site.
C) dial-up site.
D) duplicate processing facility.



5. A number of system failures are occurring when corrections to previously detected errors are resubmitted for acceptance testing. This would indicate that the maintenance team is probably not adequately performing which of the following types of testing?

A) Unit testing
B) Integration testing
C) Design walk-throughs
D) Configuration management



1. Right Answer: A
Explanation: A call-back system in a net centric environment would mean that a user with an id and password calls a remote server through a dial-up line first, and then the server disconnects and dials back to the user machine based on the user id and password using a telephone number from its database. Although the server can depend upon its own database, it cannot know the authenticity of the dialer when the user dials again. The server cannot depend upon the sender's database to dial back as the same could be manipulated.

2. Right Answer: B
Explanation: A characteristic of structured programming is smaller, workable units. Structured programming has evolved because smaller, workable units are easier to maintain. Structured programming is a style of programming which restricts the kinds of control structures. This limitation is not crippling. Any program can be written with allowed control structures. Structured programming is sometimes referred to as go-to-less programming, since a go-to statement is not allowed. This is perhaps the most well-known restriction of the style, since go-to statements were common at the time structured programming was becoming more popular.Statement labels also become unnecessary, except in languages where subroutines are identified by labels.

3. Right Answer: B
Explanation: A check digit is a numeric value that is calculated mathematically and is appended to data to ensure that the original data have not been altered or an incorrect, but valid, value substituted. This control is effective in detecting transposition and transcription errors. A range check is checking data that matches a predetermined range of values. A validity check is programmed checking of the data validity in accordance with predetermined criteria. In a duplicate check, newer fresh transactions are matched to those previously entered to ensure that they are not already in the system.

4. Right Answer: A
Explanation: A cold site is ready to receive equipment but does not offer any components at the site in advance of the need.

5. Right Answer: B
Explanation: A common system maintenance problem is that errors are often corrected quickly (especially when deadlines are tight), units are tested by the programmer, and then transferred to the acceptance test area. This often results in system problems that should have been detected during integration or system testing. Integration testing aims at ensuring that the major components of the system interface correctly.

0 Comments

Leave a comment