Inspirational journeys

Follow the stories of academics and their research expeditions

CISA—Certified Information Systems Auditor - Part 186

Mary Smith

Mon, 15 Sep 2025

CISA—Certified Information Systems Auditor - Part 186

1. Which of the following is an advantage of an integrated test facility (ITF)?

A) It uses actual master files or dummies and the IS auditor does not have to review the source of the transaction.
B) Periodic testing does not require separate test processes.
C) It validates application systems and tests the ongoing operation of the system.
D) The need to prepare test data is eliminated.



2. An IS auditor evaluates the test results of a modification to a system that deals with payment computation. The auditor finds that 50 percent of the calculations do not match predetermined totals. Which of the following would MOST likely be the next step in the audit?

A) Design further tests of the calculations that are in error.
B) Identify variables that may have caused the test results to be inaccurate.
C) Examine some of the test cases to confirm the results.
D) Document the results and prepare a report of findings, conclusions and recommendations.



3. The BEST method of proving the accuracy of a system tax calculation is by:

A) detailed visual review and analysis of the source code of the calculation programs
B) recreating program logic using generalized audit software to calculate monthly totals.
C) preparing simulated transactions for processing and comparing the results to predetermined results.
D) automatic flowcharting and analysis of the source code of the calculation programs.



4. An IS auditor performing a review of an application's controls would evaluate the:

A) efficiency of the application in meeting the business processes.
B) impact of any exposures discovered.
C) business processes served by the application.
D) application's optimization.



5. In an audit of an inventory application, which approach would provide the BEST evidence that purchase orders are valid?

A) Testing whether inappropriate personnel can change application parameters
B) Tracing purchase orders to a computer listing
C) Comparing receiving reports to purchase order details
D) Reviewing the application documentation



1. Right Answer: B
Explanation: An integrated test facility creates a factitious entity in the database to process test transactions simultaneously with live input. Its advantage is that periodic testing does not require separate test processes. However, careful planning is necessary, and test data must be isolated from production data.

2. Right Answer: C
Explanation: An IS auditor should next examine cases where incorrect calculations occurred and confirm the results. After the calculations have been confirmed, further tests can be conducted and reviewed. Report preparation, findings and recommendations would not be made until all results are confirmed.

3. Right Answer: C
Explanation: Preparing simulated transactions for processing and comparing the results to predetermined results is the best method for proving accuracy of a tax calculation.Detailed visual review, flowcharting and analysis of source code are not effective methods, and monthly totals would not address the accuracy of individual tax calculations.

4. Right Answer: B
Explanation: An application control review involves the evaluation of the application's automated controls and an assessment of any exposures resulting from the control weaknesses. The other choices may be objectives of an application audit but are not part of an audit restricted to a review of controls.

5. Right Answer: A
Explanation: To determine purchase order validity, testing access controls will provide the best evidence. Choices B and C are based on after-the-fact approaches, while choice D does not serve the purpose because what is in the system documentation may not be the same as what is happening.

0 Comments

Leave a comment