1 | P a g e | © copyright 2024/2025 | Grade A+
CISA Questions (101-200) Questions &
100% Correct Answers
Sharing risk is a key factor in which of the following methods of managing risk?
Select an answer:
A.
Transferring risk
B.
Tolerating risk
C.
Terminating risk
D.
Treating risk
✓ CORRECT A. Transferring risk (e.g., by taking an insurance policy) is a way
to share risk.
B. Tolerating risk means that the risk is accepted, but not shared.
Master01 | September, 2024/2025 | Latest update
, 2 | P a g e | © copyright 2024/2025 | Grade A+
C. Terminating risk would not involve sharing the risk because the organization has
chosen to terminate the process associated with the risk.
D. There are several ways of treating or controlling the risk, which may involve
reducing or sharing the risk, but this is not as precise an answer as transferring the
risk.
The MOST likely effect of the lack of senior management commitment to IT
strategic planning is:
Select an answer:
A.
a lack of investment in technology.
B.
a lack of a methodology for systems development.
C.
technology not aligning with organization objectives.
Master01 | September, 2024/2025 | Latest update
, 3 | P a g e | © copyright 2024/2025 | Grade A+
D.
an absence of control over technology contracts.
A. Lack of management commitment will almost certainly affect investment, but
the primary loss will be the lack of alignment of IT strategy with the strategy of
the business.
B. Systems development methodology is a process-related function and not a key
concern of management.
✓ CORRECT C. A steering committee should exist to ensure that the IT
strategies support the organization's goals. The absence of an information
technology committee or a committee not composed of senior managers
would be an indication of a lack of top-level management commitment. This
condition would increase the risk that IT would not be aligned with
organization strategy.
D. Approval for contracts is a business process and would be controlled through
financial process controls. This is not applicable here.
Which of the following is a function of an IT steering committee?
Select an answer:
Master01 | September, 2024/2025 | Latest update
, 4 | P a g e | © copyright 2024/2025 | Grade A+
A.
Monitoring vendor-controlled change control and testing
B.
Ensuring a separation of duties within the information's processing environment
C.
Approving and monitoring major projects, such as the status of IT plans and
budgets
D.
Liaising between the IT department and end users
A. Vendor change control is a sourcing issue and should be monitored by IT
management.
B. Ensuring a separation of duties within the information's processing environment
is an IT management responsibility.
Master01 | September, 2024/2025 | Latest update
CISA Questions (101-200) Questions &
100% Correct Answers
Sharing risk is a key factor in which of the following methods of managing risk?
Select an answer:
A.
Transferring risk
B.
Tolerating risk
C.
Terminating risk
D.
Treating risk
✓ CORRECT A. Transferring risk (e.g., by taking an insurance policy) is a way
to share risk.
B. Tolerating risk means that the risk is accepted, but not shared.
Master01 | September, 2024/2025 | Latest update
, 2 | P a g e | © copyright 2024/2025 | Grade A+
C. Terminating risk would not involve sharing the risk because the organization has
chosen to terminate the process associated with the risk.
D. There are several ways of treating or controlling the risk, which may involve
reducing or sharing the risk, but this is not as precise an answer as transferring the
risk.
The MOST likely effect of the lack of senior management commitment to IT
strategic planning is:
Select an answer:
A.
a lack of investment in technology.
B.
a lack of a methodology for systems development.
C.
technology not aligning with organization objectives.
Master01 | September, 2024/2025 | Latest update
, 3 | P a g e | © copyright 2024/2025 | Grade A+
D.
an absence of control over technology contracts.
A. Lack of management commitment will almost certainly affect investment, but
the primary loss will be the lack of alignment of IT strategy with the strategy of
the business.
B. Systems development methodology is a process-related function and not a key
concern of management.
✓ CORRECT C. A steering committee should exist to ensure that the IT
strategies support the organization's goals. The absence of an information
technology committee or a committee not composed of senior managers
would be an indication of a lack of top-level management commitment. This
condition would increase the risk that IT would not be aligned with
organization strategy.
D. Approval for contracts is a business process and would be controlled through
financial process controls. This is not applicable here.
Which of the following is a function of an IT steering committee?
Select an answer:
Master01 | September, 2024/2025 | Latest update
, 4 | P a g e | © copyright 2024/2025 | Grade A+
A.
Monitoring vendor-controlled change control and testing
B.
Ensuring a separation of duties within the information's processing environment
C.
Approving and monitoring major projects, such as the status of IT plans and
budgets
D.
Liaising between the IT department and end users
A. Vendor change control is a sourcing issue and should be monitored by IT
management.
B. Ensuring a separation of duties within the information's processing environment
is an IT management responsibility.
Master01 | September, 2024/2025 | Latest update
