ISACA CISA Questions With Correct
Solutions!!
Audit Charter - ANSWERa formal document that contains:
1. scope of the audit functions
2. authority of the audit functions
3. responsibility of the audit functions
Audit Universe - ANSWERAn inventory of all the functions/processes/units under the
organization
Qualitative Risk Assessment - ANSWERRisk is assessed using qualitative
parameters, such as high, medium, and low
Quantitative Risk Assessment - ANSWERRisk is assessed using numerical
parameters and is quantified
Risk Factors - ANSWERFactors that have an impact on risk. The presence of those
factors increases the risk, whereas the absence of those factors decreases the risk.
What is the objective of encryption? - ANSWERTo ensure the integrity and
confidentiality of transactions.
How are inbound transactions controlled in an EDI environment? - ANSWERInbound
transactions are controlled via logs of the receipt of inbound transactions, the use of
segment count totals, and the use of check digits to detect transportation and
transcription errors.
An audit plan helps to identify and determine the following aspects: - ANSWERThe
objective of the audit
The scope of the audit
The periodicity of the audit
The meme gets if the audit team
The method of audit
EDI - ANSWERElectronic Data Interchange
Semantic Nets - ANSWERA knowledge base that conveys meaning
Knowledge interface - ANSWERStores expert-level knowledge
Data Interface - ANSWERStores data for analysis and decision making
What is the major risk of EDI transactions? - ANSWERThe absence of agreement (in
the absence of a trading partner agreement, there could be uncertainty related to
specific legal liability).
Solutions!!
Audit Charter - ANSWERa formal document that contains:
1. scope of the audit functions
2. authority of the audit functions
3. responsibility of the audit functions
Audit Universe - ANSWERAn inventory of all the functions/processes/units under the
organization
Qualitative Risk Assessment - ANSWERRisk is assessed using qualitative
parameters, such as high, medium, and low
Quantitative Risk Assessment - ANSWERRisk is assessed using numerical
parameters and is quantified
Risk Factors - ANSWERFactors that have an impact on risk. The presence of those
factors increases the risk, whereas the absence of those factors decreases the risk.
What is the objective of encryption? - ANSWERTo ensure the integrity and
confidentiality of transactions.
How are inbound transactions controlled in an EDI environment? - ANSWERInbound
transactions are controlled via logs of the receipt of inbound transactions, the use of
segment count totals, and the use of check digits to detect transportation and
transcription errors.
An audit plan helps to identify and determine the following aspects: - ANSWERThe
objective of the audit
The scope of the audit
The periodicity of the audit
The meme gets if the audit team
The method of audit
EDI - ANSWERElectronic Data Interchange
Semantic Nets - ANSWERA knowledge base that conveys meaning
Knowledge interface - ANSWERStores expert-level knowledge
Data Interface - ANSWERStores data for analysis and decision making
What is the major risk of EDI transactions? - ANSWERThe absence of agreement (in
the absence of a trading partner agreement, there could be uncertainty related to
specific legal liability).
