1 | P a g e | © copyright 2024/2025 | Grade A+
CISA Questions (501 - 600) Questions
& 100% Correct Answers
In auditing a database environment, an IS auditor will be MOST concerned if the
database administrator (DBA) is performing which of the following functions?
Select an answer:
A.
Performing database changes according to change management procedures
B.
Installing patches or upgrades to the operating system
C.
Sizing table space and consulting on table join limitations
D.
Performing backup and recovery procedures
✓ :~~ You answered D. The correct answer is B.
Master01 | September, 2024/2025 | Latest update
, 2 | P a g e | © copyright 2024/2025 | Grade A+
A. Performing database changes according to change management procedures
would be a normal function of the database administrator (DBA) and would be
compliant with the procedures of the organization.
B. Installing patches or upgrades to the operating system is a function that should
be performed by a systems administrator, not by a DBA. If a DBA were performing
this function, there would be a risk based on inappropriate segregation of duties.
C. A DBA is expected to support the business through helping design, create and
maintain databases and the interfaces to the databases.
D. The DBA often performs or supports database backup and recovery procedures.
The database administrator (DBA) suggests that database efficiency can be
improved by denormalizing some tables. This would result in:
Select an answer:
A.
loss of confidentiality.
B.
Master01 | September, 2024/2025 | Latest update
, 3 | P a g e | © copyright 2024/2025 | Grade A+
increased redundancy.
C.
unauthorized accesses.
D.
application malfunctions.
✓ :~~ You are correct, the answer is B.
A. Denormalization should not cause loss of confidentiality even though
confidential data may be involved. The database administrator (DBA) should ensure
that access controls to the databases remain effective.
B. Normalization is a design or optimization process for a relational database that
minimizes redundancy; therefore, denormalization would increase redundancy.
Redundancy, which is usually considered positive when it is a question of resource
availability, is negative in a database environment because it demands additional
and otherwise unnecessary data handling efforts. Denormalization is sometimes
advisable for functional reasons.
C. Denormalization pertains to the structure of the database, not the access
controls. It should not result in unauthorized access.
Master01 | September, 2024/2025 | Latest update
, 4 | P a g e | © copyright 2024/2025 | Grade A+
D. Denormalization may require some changes to the calls between databases and
applications, but should not cause application malfunctions.
The objective of concurrency control in a database system is to:
Select an answer:
A.
restrict updating of the database to authorized users.
B.
prevent integrity problems when two processes attempt to update the same data
at the same time.
C.
prevent inadvertent or unauthorized disclosure of data in the database.
D.
ensure the accuracy, completeness and consistency of data.
✓ :~~ You are correct, the answer is B.
Master01 | September, 2024/2025 | Latest update
CISA Questions (501 - 600) Questions
& 100% Correct Answers
In auditing a database environment, an IS auditor will be MOST concerned if the
database administrator (DBA) is performing which of the following functions?
Select an answer:
A.
Performing database changes according to change management procedures
B.
Installing patches or upgrades to the operating system
C.
Sizing table space and consulting on table join limitations
D.
Performing backup and recovery procedures
✓ :~~ You answered D. The correct answer is B.
Master01 | September, 2024/2025 | Latest update
, 2 | P a g e | © copyright 2024/2025 | Grade A+
A. Performing database changes according to change management procedures
would be a normal function of the database administrator (DBA) and would be
compliant with the procedures of the organization.
B. Installing patches or upgrades to the operating system is a function that should
be performed by a systems administrator, not by a DBA. If a DBA were performing
this function, there would be a risk based on inappropriate segregation of duties.
C. A DBA is expected to support the business through helping design, create and
maintain databases and the interfaces to the databases.
D. The DBA often performs or supports database backup and recovery procedures.
The database administrator (DBA) suggests that database efficiency can be
improved by denormalizing some tables. This would result in:
Select an answer:
A.
loss of confidentiality.
B.
Master01 | September, 2024/2025 | Latest update
, 3 | P a g e | © copyright 2024/2025 | Grade A+
increased redundancy.
C.
unauthorized accesses.
D.
application malfunctions.
✓ :~~ You are correct, the answer is B.
A. Denormalization should not cause loss of confidentiality even though
confidential data may be involved. The database administrator (DBA) should ensure
that access controls to the databases remain effective.
B. Normalization is a design or optimization process for a relational database that
minimizes redundancy; therefore, denormalization would increase redundancy.
Redundancy, which is usually considered positive when it is a question of resource
availability, is negative in a database environment because it demands additional
and otherwise unnecessary data handling efforts. Denormalization is sometimes
advisable for functional reasons.
C. Denormalization pertains to the structure of the database, not the access
controls. It should not result in unauthorized access.
Master01 | September, 2024/2025 | Latest update
, 4 | P a g e | © copyright 2024/2025 | Grade A+
D. Denormalization may require some changes to the calls between databases and
applications, but should not cause application malfunctions.
The objective of concurrency control in a database system is to:
Select an answer:
A.
restrict updating of the database to authorized users.
B.
prevent integrity problems when two processes attempt to update the same data
at the same time.
C.
prevent inadvertent or unauthorized disclosure of data in the database.
D.
ensure the accuracy, completeness and consistency of data.
✓ :~~ You are correct, the answer is B.
Master01 | September, 2024/2025 | Latest update
