CISA—Certified Information Systems Auditor - Part 384

1. The business owner's approval of software changes being moved into production is PRIMARILY necessary to:

A) ensure that an application functionality requirement is satisfied.
B) prevent unauthorized access to data.
C) inform management of deployments of new functionality.
D) confirm there is a process to control system changes.



2. A warehouse employee of a retail company has been able to conceal the theft of inventory items by entering adjustments of either damaged or lost stock items to the inventory system. Which control would have BEST prevented this type of fraud in a retail environment?

A) An edit check for the validity of the inventory transaction
B) Separate authorization for input of transactions
C) Unscheduled audits of lost stock lines
D) Statistical sampling of adjustment transactions



3. Which of the following controls will MOST effectively detect inconsistent records resulting from the lack of referential integrity in a database management system?

A) Concurrent access controls
B) Incremental data backups
C) Performance monitoring tools
D) Periodic table link checks



4. Which of the following is MOST appropriate to prevent unauthorized retrieval of confidential information stored in a business application system?

A) Apply single sign-on for access control.
B) Enforce an internal data access policy.
C) Enforce the use of digital signatures.
D) Implement segregation of duties.



5. Which of the following is the MOST effective way for an organization to protect against data leakage?

A) Conduct periodic security awareness training.
B) Limit employee Internet access.
C) Review firewall logs for anomalies.
D) Develop a comprehensive data loss prevention policy.