CA Foundation Business Economics Questions 2023 - Part 32
Fri, 03 Mar 2023
Inspirational journeys
Follow the stories of academics and their research expeditions
CISA—Certified Information Systems Auditor - Part 229
1. An IS auditor reviewing a proposed application software acquisition should ensure that the:
A) operating system (OS) being used is compatible with the existing hardware platform.
B) planned OS updates have been scheduled to minimize negative impacts on company needs.
C) OS has the latest versions and updates.
D) products are compatible with the current or planned OS.
2. The GREATEST benefit in implementing an expert system is the:
A) capturing of the knowledge and experience of individuals in an organization.
B) sharing of knowledge in a central repository.
C) enhancement of personnel productivity and performance.
D) reduction of employee turnover in key departments.
3. By evaluating application development projects against the capability maturity model (CMM), an IS auditor should be able to verify that:
A) reliable products are guaranteed.
B) programmers' efficiency is improved.
C) security requirements are designed.
D) predictable software processes are followed.
4. The waterfall life cycle model of software development is most appropriately used when:
A) requirements are well understood and are expected to remain stable, as is the business environment in which the system will operate.
B) requirements are well understood and the project is subject to time pressures.
C) the project intends to apply an object-oriented design and programming approach.
D) the project will involve the use of new technology.
5. Which of the following is MOST critical when creating data for testing the logic in a new or modified application system?
A) A sufficient quantity of data for each test case
B) Data representing conditions that are expected in actual processing
C) Completing the test on schedule
D) A random sample of actual data
A) operating system (OS) being used is compatible with the existing hardware platform.
B) planned OS updates have been scheduled to minimize negative impacts on company needs.
C) OS has the latest versions and updates.
D) products are compatible with the current or planned OS.
2. The GREATEST benefit in implementing an expert system is the:
A) capturing of the knowledge and experience of individuals in an organization.
B) sharing of knowledge in a central repository.
C) enhancement of personnel productivity and performance.
D) reduction of employee turnover in key departments.
3. By evaluating application development projects against the capability maturity model (CMM), an IS auditor should be able to verify that:
A) reliable products are guaranteed.
B) programmers' efficiency is improved.
C) security requirements are designed.
D) predictable software processes are followed.
4. The waterfall life cycle model of software development is most appropriately used when:
A) requirements are well understood and are expected to remain stable, as is the business environment in which the system will operate.
B) requirements are well understood and the project is subject to time pressures.
C) the project intends to apply an object-oriented design and programming approach.
D) the project will involve the use of new technology.
5. Which of the following is MOST critical when creating data for testing the logic in a new or modified application system?
A) A sufficient quantity of data for each test case
B) Data representing conditions that are expected in actual processing
C) Completing the test on schedule
D) A random sample of actual data
1. Right Answer: D
Explanation: Choices A, B and C are incorrect because none of them are related to the area being audited. In reviewing the proposed application, the auditor should ensure that the products to be purchased are compatible with the current or planned OS. Regarding choice, A, if the OS is currently being used, it is compatible with the existing hardware platform, because if it is not it would not operate properly. In choice B, the planned OS updates should be scheduled to minimize negative impacts on the organization. For choice C, the installed OS should be equipped with the most recent versions and updates (with sufficient history and stability).
2. Right Answer: A
Explanation: The basis for an expert system is the capture and recording of the knowledge and experience of individuals in an organization. Coding and entering the knowledge in a central repository, shareable within the enterprise, is a means of facilitating the expert system. Enhancing personnel productivity and performance is a benefit; however, it is not as important as capturing the knowledge and experience. Employee turnover is not necessarily affected by an expert system.
3. Right Answer: D
Explanation: By evaluating the organization's development projects against the CMM, an IS auditor determines whether the development organization follows a stable, predictable software process. Although the likelihood of success should increase as the software processes mature toward the optimizing level, mature processes do not guarantee a reliable product. CMM does not evaluate technical processes such as programming nor does it evaluate security requirements or other application controls.
4. Right Answer: A
Explanation: Historically, the waterfall model has been best suited to the stable conditions described in choiceA. When the degree of uncertainty of the system to be delivered and the conditions in which it will be used rises, the waterfall model has not been successful, in these circumstances, the various forms of iterative development life cycle gives the advantage of breaking down the scope of the overall system to be delivered, making the requirements gathering and design activities more manageable. The ability to deliver working software earlier also acts to alleviate uncertainty and may allow an earlier realization of benefits. The choice of a design and programming approach is not itself a determining factor of the type of software development life cycle that is appropriate. The use of new technology in a project introduces a significant element of risk. An iterative form of development, particularly one of the agile methods that focuses on early development of actual working software, is likely to be the better option to manage this uncertainty.
5. Right Answer: B
Explanation: Selecting the right kind of data is key in testing a computer system. The data should not only include valid and invalid data but should be representative of actual processing; quality is more important than quantity. It is more important to have adequate test data than to complete the testing on schedule. It is unlikely that a random sample of actual data would cover all test conditions and provide a reasonable representation of actual data.
Explanation: Choices A, B and C are incorrect because none of them are related to the area being audited. In reviewing the proposed application, the auditor should ensure that the products to be purchased are compatible with the current or planned OS. Regarding choice, A, if the OS is currently being used, it is compatible with the existing hardware platform, because if it is not it would not operate properly. In choice B, the planned OS updates should be scheduled to minimize negative impacts on the organization. For choice C, the installed OS should be equipped with the most recent versions and updates (with sufficient history and stability).
2. Right Answer: A
Explanation: The basis for an expert system is the capture and recording of the knowledge and experience of individuals in an organization. Coding and entering the knowledge in a central repository, shareable within the enterprise, is a means of facilitating the expert system. Enhancing personnel productivity and performance is a benefit; however, it is not as important as capturing the knowledge and experience. Employee turnover is not necessarily affected by an expert system.
3. Right Answer: D
Explanation: By evaluating the organization's development projects against the CMM, an IS auditor determines whether the development organization follows a stable, predictable software process. Although the likelihood of success should increase as the software processes mature toward the optimizing level, mature processes do not guarantee a reliable product. CMM does not evaluate technical processes such as programming nor does it evaluate security requirements or other application controls.
4. Right Answer: A
Explanation: Historically, the waterfall model has been best suited to the stable conditions described in choiceA. When the degree of uncertainty of the system to be delivered and the conditions in which it will be used rises, the waterfall model has not been successful, in these circumstances, the various forms of iterative development life cycle gives the advantage of breaking down the scope of the overall system to be delivered, making the requirements gathering and design activities more manageable. The ability to deliver working software earlier also acts to alleviate uncertainty and may allow an earlier realization of benefits. The choice of a design and programming approach is not itself a determining factor of the type of software development life cycle that is appropriate. The use of new technology in a project introduces a significant element of risk. An iterative form of development, particularly one of the agile methods that focuses on early development of actual working software, is likely to be the better option to manage this uncertainty.
5. Right Answer: B
Explanation: Selecting the right kind of data is key in testing a computer system. The data should not only include valid and invalid data but should be representative of actual processing; quality is more important than quantity. It is more important to have adequate test data than to complete the testing on schedule. It is unlikely that a random sample of actual data would cover all test conditions and provide a reasonable representation of actual data.
Tags:
it certification certified it it exams isaca certification isaca cgeit isaca cisa isaca cism isaca cobit 5 isaca crisc isaca questions practice exams pratice quests risc maangement it management it questions isaca answers isaca practice isaca dumps isaca test test questions questins and answer explanation0 Comments
Categories
Recent posts
CA Foundation Business Economics Questions 2023 - Part 31
Fri, 03 Mar 2023
CA Foundation Business Economics Questions 2023 - Part 30
Fri, 03 Mar 2023
Leave a comment