CISA QUESTIONS AND CORRECT
ANSWERS (1-100)
**Enterprise Resource Planning (ERP) - ANS -A packaged business software system that allows
an organization to automate and integrate the majority of its business processes, share
common data and practices across the entire organiztion, and produce and access information
in a real-time environment. Examples of ERP include SAP, Oracle Financials and J.K. Edwards.
**Indemnity clause - ANS -a contractual transfer of risk between two contractual parties
generally to prevent loss or compensate for a loss which may occur as a result of a specified
event.
A batch transaction job failed in production; however, the same job returned no issues during
user acceptance testing (UAT). Analysis of the production batch job indicates that it was altered
after UAT. Which of the following ways would be the BEST to mitigate this risk in the future?
Select an answer:
A.
Improve regression test cases.
B.
Activate audit trails for a limited period after release.
C.
Conduct an application user access review.
,D.
Ensure that developers do not have access to code after testing. - ANS -You are correct, the
answer is D.
A. Improving the quality of the testing would not be applicable in this case because the more
important issue is that developers have access to the production environment.
B. Activating audit trails or performing additional logging may be useful; however, the more
important issue is that developers have access to the production environment.
C. Conducting an application user access review would not identify developers' access to code
because they would not be included in this review.
D. To ensure proper segregation of duties, developers should be restricted to the development
environment only. If code needs to be modified after user acceptance testing (UAT), the process
must be restarted in development.
A benefit of open system architecture is that it:
A. facilitates interoperability.
B. facilitates the integration of proprietary components.
C. will be a basis for volume discounts from equipment vendors.
D. allows for the achievement of more economies of scale for equipment. - ANS -You are
correct, the answer is A.
,A. Open systems are those for which suppliers provide components whose interfaces are
defined by public standards, thus facilitating interoperability between systems made by
different vendors.
B. Closed system components are built to proprietary standards so that other suppliers' systems
cannot or will not interface with existing systems.
C. The ability to obtain volume discounts is achieved through the use of bulk purchasing or a
primary vendor, not through open system architecture.
D. Open systems may be less expensive than proprietary systems depending on the supplier, but
the primary benefit of open system architecture is its interoperability between vendors.
A benefit of open system architecture is that it:
Select an answer:
A.
facilitates interoperability.
B.
facilitates the integration of proprietary components.
C.
will be a basis for volume discounts from equipment vendors.
D.
, allows for the achievement of more economies of scale for equipment. - ANS -You are correct,
the answer is A.
A. Open systems are those for which suppliers provide components whose interfaces are
defined by public standards, thus facilitating interoperability between systems made by
different vendors.
B. Closed system components are built to proprietary standards so that other suppliers' systems
cannot or will not interface with existing systems.
C. The ability to obtain volume discounts is achieved through the use of bulk purchasing or a
primary vendor, not through open system architecture.
D. Open systems may be less expensive than proprietary systems depending on the supplier, but
the primary benefit of open system architecture is its interoperability between vendors.
A benefit of quality of service (QoS) is that the:
Select an answer:
A.
entire network's availability and performance will be significantly improved.
B.
telecom carrier will provide the company with accurate service-level compliance reports.
C.
participating applications will have bandwidth guaranteed.
ANSWERS (1-100)
**Enterprise Resource Planning (ERP) - ANS -A packaged business software system that allows
an organization to automate and integrate the majority of its business processes, share
common data and practices across the entire organiztion, and produce and access information
in a real-time environment. Examples of ERP include SAP, Oracle Financials and J.K. Edwards.
**Indemnity clause - ANS -a contractual transfer of risk between two contractual parties
generally to prevent loss or compensate for a loss which may occur as a result of a specified
event.
A batch transaction job failed in production; however, the same job returned no issues during
user acceptance testing (UAT). Analysis of the production batch job indicates that it was altered
after UAT. Which of the following ways would be the BEST to mitigate this risk in the future?
Select an answer:
A.
Improve regression test cases.
B.
Activate audit trails for a limited period after release.
C.
Conduct an application user access review.
,D.
Ensure that developers do not have access to code after testing. - ANS -You are correct, the
answer is D.
A. Improving the quality of the testing would not be applicable in this case because the more
important issue is that developers have access to the production environment.
B. Activating audit trails or performing additional logging may be useful; however, the more
important issue is that developers have access to the production environment.
C. Conducting an application user access review would not identify developers' access to code
because they would not be included in this review.
D. To ensure proper segregation of duties, developers should be restricted to the development
environment only. If code needs to be modified after user acceptance testing (UAT), the process
must be restarted in development.
A benefit of open system architecture is that it:
A. facilitates interoperability.
B. facilitates the integration of proprietary components.
C. will be a basis for volume discounts from equipment vendors.
D. allows for the achievement of more economies of scale for equipment. - ANS -You are
correct, the answer is A.
,A. Open systems are those for which suppliers provide components whose interfaces are
defined by public standards, thus facilitating interoperability between systems made by
different vendors.
B. Closed system components are built to proprietary standards so that other suppliers' systems
cannot or will not interface with existing systems.
C. The ability to obtain volume discounts is achieved through the use of bulk purchasing or a
primary vendor, not through open system architecture.
D. Open systems may be less expensive than proprietary systems depending on the supplier, but
the primary benefit of open system architecture is its interoperability between vendors.
A benefit of open system architecture is that it:
Select an answer:
A.
facilitates interoperability.
B.
facilitates the integration of proprietary components.
C.
will be a basis for volume discounts from equipment vendors.
D.
, allows for the achievement of more economies of scale for equipment. - ANS -You are correct,
the answer is A.
A. Open systems are those for which suppliers provide components whose interfaces are
defined by public standards, thus facilitating interoperability between systems made by
different vendors.
B. Closed system components are built to proprietary standards so that other suppliers' systems
cannot or will not interface with existing systems.
C. The ability to obtain volume discounts is achieved through the use of bulk purchasing or a
primary vendor, not through open system architecture.
D. Open systems may be less expensive than proprietary systems depending on the supplier, but
the primary benefit of open system architecture is its interoperability between vendors.
A benefit of quality of service (QoS) is that the:
Select an answer:
A.
entire network's availability and performance will be significantly improved.
B.
telecom carrier will provide the company with accurate service-level compliance reports.
C.
participating applications will have bandwidth guaranteed.
