1 | P a g e | © copyright 2024/2025 | Grade A+
CISA Questions 201 – 300 Questions &
100% Correct Answers
An IS auditor reviewing an outsourcing contract of IT facilities would expect it to
define the:
Select an answer:
A.
hardware configuration.
B.
access control software.
C.
ownership of intellectual property.
D.
application development methodology.
✓ :~~ You are correct, the answer is C.
Master01 | September, 2024/2025 | Latest update
, 2 | P a g e | © copyright 2024/2025 | Grade A+
A. The hardware configuration is generally irrelevant as long as the functionality,
availability and security can be affected, which are specific contractual
obligations.
B. The access control software is generally irrelevant as long as the functionality,
availability and security can be affected, which are specific contractual
obligations.
C. The contract must specify who owns the intellectual property (i.e., information
being processed, application programs). Ownership of intellectual property will
have a significant cost and is a key aspect to be defined in an outsourcing
contract.
D. The development methodology should be of no real concern in an outsourcing
contract.
An IS auditor has been assigned to review IT structures and activities recently
outsourced to various providers. Which of the following should the IS auditor
determine FIRST?
Select an answer:
A.
Master01 | September, 2024/2025 | Latest update
, 3 | P a g e | © copyright 2024/2025 | Grade A+
An audit clause is present in all contracts.
B.
The service level agreement (SLA) of each contract is substantiated by appropriate
key performance indicators (KPIs).
C.
The contractual warranties of the providers support the business needs of the
organization.
D.
At contract termination, support is guaranteed by each outsourcer for new
outsourcers.
✓ :~~ You answered A. The correct answer is C.
A. All other choices are important, but the first step is to ensure that the contracts
support the business—only then can an audit process be valuable.
B. All service level agreements (SLAs) should be measureable and reinforced
through key performance indicators (KPIs)—but the first step is to ensure that the
SLAs are aligned with business requirements.
Master01 | September, 2024/2025 | Latest update
, 4 | P a g e | © copyright 2024/2025 | Grade A+
C. The primary requirement is for the services provided by the outsource supplier
to meet the needs of the business.
D. Having appropriate controls in place for contract termination are important, but
first the IS auditor must be focused on the requirement of the supplier to meet
business needs.
With respect to the outsourcing of IT services, which of the following conditions
should be of GREATEST concern to an IS auditor?
Select an answer:
A.
Core activities that provide a differentiated advantage to the organization have
been outsourced.
B.
Periodic renegotiation is not specified in the outsourcing contract.
C.
The outsourcing contract fails to cover every action required by the business.
Master01 | September, 2024/2025 | Latest update
CISA Questions 201 – 300 Questions &
100% Correct Answers
An IS auditor reviewing an outsourcing contract of IT facilities would expect it to
define the:
Select an answer:
A.
hardware configuration.
B.
access control software.
C.
ownership of intellectual property.
D.
application development methodology.
✓ :~~ You are correct, the answer is C.
Master01 | September, 2024/2025 | Latest update
, 2 | P a g e | © copyright 2024/2025 | Grade A+
A. The hardware configuration is generally irrelevant as long as the functionality,
availability and security can be affected, which are specific contractual
obligations.
B. The access control software is generally irrelevant as long as the functionality,
availability and security can be affected, which are specific contractual
obligations.
C. The contract must specify who owns the intellectual property (i.e., information
being processed, application programs). Ownership of intellectual property will
have a significant cost and is a key aspect to be defined in an outsourcing
contract.
D. The development methodology should be of no real concern in an outsourcing
contract.
An IS auditor has been assigned to review IT structures and activities recently
outsourced to various providers. Which of the following should the IS auditor
determine FIRST?
Select an answer:
A.
Master01 | September, 2024/2025 | Latest update
, 3 | P a g e | © copyright 2024/2025 | Grade A+
An audit clause is present in all contracts.
B.
The service level agreement (SLA) of each contract is substantiated by appropriate
key performance indicators (KPIs).
C.
The contractual warranties of the providers support the business needs of the
organization.
D.
At contract termination, support is guaranteed by each outsourcer for new
outsourcers.
✓ :~~ You answered A. The correct answer is C.
A. All other choices are important, but the first step is to ensure that the contracts
support the business—only then can an audit process be valuable.
B. All service level agreements (SLAs) should be measureable and reinforced
through key performance indicators (KPIs)—but the first step is to ensure that the
SLAs are aligned with business requirements.
Master01 | September, 2024/2025 | Latest update
, 4 | P a g e | © copyright 2024/2025 | Grade A+
C. The primary requirement is for the services provided by the outsource supplier
to meet the needs of the business.
D. Having appropriate controls in place for contract termination are important, but
first the IS auditor must be focused on the requirement of the supplier to meet
business needs.
With respect to the outsourcing of IT services, which of the following conditions
should be of GREATEST concern to an IS auditor?
Select an answer:
A.
Core activities that provide a differentiated advantage to the organization have
been outsourced.
B.
Periodic renegotiation is not specified in the outsourcing contract.
C.
The outsourcing contract fails to cover every action required by the business.
Master01 | September, 2024/2025 | Latest update
