Inspirational journeys

Follow the stories of academics and their research expeditions

CISA—Certified Information Systems Auditor - Part 226

Mary Smith

Sat, 18 Apr 2026

CISA—Certified Information Systems Auditor - Part 226

1. An advantage of using sanitized live transactions in test data is that:

A) all transaction types will be included.
B) every error condition is likely to be tested.
C) no special routines are required to assess the results.
D) test transactions are representative of live processing.



2. An IS auditor's PRIMARY concern when application developers wish to use a copy of yesterday's production transaction file for volume tests is that:

A) users may prefer to use contrived data for testing.
B) unauthorized access to sensitive data may result.
C) error handling and credibility checks may not be fully proven.
D) the full functionality of the new process may not necessarily be tested.



3. Which of the following is the PRIMARY purpose for conducting parallel testing?

A) To determine if the system is cost-effective
B) To enable comprehensive unit and system testing
C) To highlight errors in the program interfaces with files
D) To ensure the new system meets user requirements



4. The knowledge base of an expert system that uses questionnaires to lead the user through a series of choices before a conclusion is reached is known as:

A) rules.
B) decision trees.
C) semantic nets.
D) dataflow diagrams.



5. An advantage in using a bottom-up vs. a top-down approach to software testing is that:

A) interface errors are detected earlier.
B) confidence in the system is achieved earlier.
C) errors in critical modules are detected earlier.
D) major functions and processing are tested earlier.



1. Right Answer: D
Explanation: Test data will be representative of live processing; however, it is unlikely that all transaction types or error conditions will be tested in this way.

2. Right Answer: B
Explanation: Unless the data are sanitized, there is a risk of disclosing sensitive data.

3. Right Answer: D
Explanation: The purpose of parallel testing is to ensure that the implementation of a new system will meet user requirements. Parallel testing may show that the old system is, in fact, better than the new system, but this is not the primary reason. Unit and system are completed before parallel testing. Program interfaces with files are tested for errors during system testing.

4. Right Answer: B
Explanation: Decision trees use questionnaires to lead a user through a series of choices until a conclusion is reached. Rules refer to the expression of declarative knowledge through the use of if-then relationships. Semantic nets consist of a graph in which nodes represent physical or conceptual objects and the arcs describe the relationship between the nodes. Semantic nets resemble a dataflow diagram and make use of an inheritance mechanism to prevent duplication of data.

5. Right Answer: C
Explanation: The bottom-up approach to software testing begins with the testing of atomic units, such as programs and modules, and works upward until a complete system testing has taken place. The advantages of using a bottom-up approach to software testing are the fact that there is no need for stubs or drivers and errors in critical modules are found earlier. The other choices in this question all refer to advantages of a top-down approach, which follows the opposite path, either in depth-first or breadth-first search order.

0 Comments

Leave a comment