Review Questions

1. What type of control is representative of exception reporting?

A. Processing

B. Output

C. Database integrity

D. Service level

2. How should management act to best deal with emergency changes?

A. Emergency changes cannot be made without advance testing.

B. All changes should still undergo review.

C. The change control process does not apply to emergency conditions.

D. Emergency changes are not allowed under any condition.

3. What is one of the bigger concerns regarding asset disposal?

A. Residual asset value

B. Employees taking disposed property home

C. Standing data

D. Environmental regulations

4. Why is ongoing system monitoring important?

A. For preventative control

B. For historical logging and trend analysis

C. To collect ...

Get CISA® Certified Information Systems Auditor®: Study Guide, Third Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.