ISACA IT Acquisition, Development, and Implementation 2

Question 1

When auditing application controls, which control type BEST ensures that all data entered into a system has been processed completely?

Accepted Answer

Batch totals

Answer

Edit checks

Answer

Sequence checks

Answer

Hash totals

Question 2

During data conversion from a legacy to a new system, which procedure is MOST important for ensuring data integrity?

Accepted Answer

Performing parallel processing and reconciling results between systems

Answer

Compressing data to reduce storage requirements

Answer

Deleting duplicate records prior to migration

Answer

Converting all data to a single standardized format

Question 3

User acceptance testing (UAT) is PRIMARILY performed by which group?

Accepted Answer

End users and business stakeholders

Answer

IS auditors

Answer

Development team members

Answer

Quality assurance specialists

Question 4

Which configuration management practice BEST supports an audit trail for system changes?

Accepted Answer

Maintaining a configuration management database (CMDB)

Answer

Requiring weekly backups of all configurations

Answer

Limiting configuration access to only senior IT staff

Answer

Encrypting all configuration files at rest

Question 5

In an Agile development methodology, what is the PRIMARY audit concern compared to a traditional waterfall approach?

Accepted Answer

Documentation and formal change control may be less rigorous

Answer

Agile typically produces lower quality code

Answer

Agile introduces more security vulnerabilities by default

Answer

Agile requires significantly more testing phases

Question 6

When auditing an outsourced software development arrangement, an IS auditor should PRIMARILY review which documentation?

Accepted Answer

Contract terms, SLAs, and right-to-audit clauses

Answer

The vendor's office location and physical size

Answer

The vendor's employee compensation structures

Answer

Marketing materials provided by the vendor

Question 7

An effective patch management process should ENSURE which of the following practices?

Accepted Answer

Patches are tested in a non-production environment before deployment

Answer

All patches are applied immediately upon vendor release

Answer

Only security patches are required; performance patches are optional

Answer

Patches are applied without management approval to minimize delay