Inspirational journeys

Follow the stories of academics and their research expeditions

CISA—Certified Information Systems Auditor - Part 231

Mary Smith

Sat, 18 Apr 2026

CISA—Certified Information Systems Auditor - Part 231

1. Which of the following would be the MOST cost-effective recommendation for reducing the number of defects encountered during software development projects?

A) increase the time allocated for system testing
B) implement formal software inspections
C) increase the development staff
D) Require the sign-off of all project deliverables



2. Which of the following is a prevalent risk in the development of end-user computing (EUC) applications?

A) Applications may not be subject to testing and IT general controls
B) increased development and maintenance costs
C) increased application development time
D) Decision-making may be impaired due to diminished responsiveness to requests for information



3. Normally, it would be essential to involve which of the following stakeholders in the initiation stage of a project?

A) System owners
B) System users
C) System designers
D) System builders



4. The MAJOR advantage of a component-based development approach is the:

A) ability to manage an unrestricted variety of data types.
B) provision for modeling complex relationships.
C) capacity to meet the demands of a changing environment.
D) support of multiple development environments.



5. The specific advantage of white box testing is that it:

A) verifies a program can operate successfully with other parts of the system.
B) ensures a program's functional operating effectiveness without regard to the internal program structure.
C) determines procedural accuracy or conditions of a program's specific logic paths.
D) examines a program's functionality by executing it in a tightly controlled or virtual environment with restricted access to the host system.



1. Right Answer: B
Explanation: inspections of code and design are a proven software quality technique. An advantage of this approach is that defects are identified before they propagate through the development life cycle. This reduces the cost of correction as less rework is involved. Allowing more time for testing may discover more defects; however, little is revealed as to why the quality problems are occurring and the cost of the extra testing, and the cost of rectifying the defects found will be greater than if they had been discovered earlier in the development process. The ability of the development staff can have a bearing on the quality of what is produced; however, replacing staff can be expensive and disruptive, and the presence of a competent staff cannot guarantee quality in the absence of effective quality management processes. Sign-off of deliverables may help detect defects if signatories are diligent about reviewing deliverable content; however, this is difficult to enforce.Deliverable reviews normally do not go down to the same level of detail as software inspections.

2. Right Answer: A
Explanation: End-user developed applications may not be subjected to an independent outside review by systems analysts and frequently are not created in the context of a formal development methodology. These applications may lack appropriate standards, controls, quality assurance procedures, and documentation. A risk of end- user applications is that management may rely on them as much as traditional applications. End-user computing (EUC) systems typically result in reduced application development and maintenance costs, and a reduced development cycle time. EUC systems normally increase flexibility and responsiveness to management's information requests.

3. Right Answer: A
Explanation: System owners are the information systems (project) sponsors or chief advocates. They normally are responsible for initiating and funding projects to develop, operate and maintain information systems. System users are the individuals who use or are affected by the information system.Their requirements are crucial in the testing stage of a project. System designers translate business requirements and constraints into technical solutions. System builders construct the system based on the specifications from the systems designers. In most cases, the designers and builders are one and the same.

4. Right Answer: D
Explanation: Components written in one language can interact with components written in other languages or running on other machines, which can increase the speed of development. Software developers can then focus on business logic. The other choices are not the most significant advantages of a component-based development approach.

5. Right Answer: C
Explanation: White box testing assesses the effectiveness of software program logic. Specifically, test data are used in determining procedural accuracy or conditions of a program's logic paths. Verifying the program can operate successfully with other parts of the system is sociability testing. Testing the program's functionality without knowledge of internal structures is black box testing. Controlled testing of programs in a semi-debugged environment, either heavily controlled step-by- step or via monitoring in virtual machines, is sand box testing.

0 Comments

Leave a comment