Inspirational journeys

Follow the stories of academics and their research expeditions

CISA—Certified Information Systems Auditor - Part 235

Mary Smith

Tue, 21 Apr 2026

CISA—Certified Information Systems Auditor - Part 235

1. Responsibility and reporting lines cannot always be established when auditing automated systems since:

A) diversified control makes ownership irrelevant.
B) staff traditionally changes jobs with greater frequency.
C) ownership is difficult to establish where resources are shared.
D) duties change frequently in the rapid development of technology.



2. In an online transaction processing system, data integrity is maintained by ensuring that a transaction is either completed in its entirety or not at all. This principle of data integrity is known as:

A) isolation.
B) consistency.
C) atomicity.
D) durability.



3. Which of the following would help to ensure the portability of an application connected to a database?

A) Verification of database import and export procedures
B) Usage of a structured query language (SQL)
C) Analysis of stored procedures/triggers
D) Synchronization of the entity-relation model with the database physical schema



4. Business units are concerned about the performance of a newly implemented system. Which of the following should an IS auditor recommend?

A) Develop a baseline and monitor system usage.
B) Define alternate processing procedures.
C) Prepare the maintenance manual.
D) implement the changes users have suggested.



5. A company undertakes a business process reengineering (BPR) project in support of a new and direct marketing approach to its customers. Which of the following would be an IS auditor's main concern about the new process?

A) Whether key controls are in place to protect assets and information resources
B) If the system addresses corporate customer requirements
C) Whether the system can meet the performance goals (time and resources)
D) Whether owners have been identified who will be responsible for the process



1. Right Answer: C
Explanation: Because of the diversified nature of both data and application systems, the actual owner of data and applications may be hard to establish.

2. Right Answer: C
Explanation: The principle of atomicity requires that a transaction be completed in its entirety or not at all. If an error or interruption occurs, all changes made up to that point are backed out. Consistency ensures that all integrity conditions in the database be maintained with each transaction. Isolation ensures that each transaction is isolated from other transactions; hence, each transaction only accesses data that are part of a consistent database state. Durability ensures that, when a transaction has been reported back to a user as complete, the resultant changes to the database will survive subsequent hardware or software failures.

3. Right Answer: B
Explanation: The use of SQL facilitates portability. Verification of import and export procedures with other systems ensures better interfacing with other systems, analyzing stored procedures/triggers ensures proper access/performance, and reviewing the design entity- relation model will be helpful, but none of these contribute to the portability of an application connecting to a database.

4. Right Answer: A
Explanation: An IS auditor should recommend the development of a performance baseline and monitor the system's performance, against the baseline, to develop empirical data upon which decisions for modifying the system can be made. Alternate processing procedures and a maintenance manual will not alter a system's performance. Implementing changes without knowledge of the cause(s) for the perceived poor performance may not result in a more efficient system.

5. Right Answer: A
Explanation: The audit team must advocate the inclusion of the key controls and verify that the controls are in place before implementing the new process. Choices B, C and D are objectives that the business process reengineering (BPR) process should achieve, but they are not the auditor's primary concern.

0 Comments

Leave a comment