An IS auditor needs to verify that a data center's backup tapes are stored offsite. Which evidence collection technique is MOST appropriate?

Inquiry of the IT manager about the offsite storage process

Recalculation of the number of tapes stored offsite

Observation of the offsite storage facility and inspection of the storage logs

Confirmation from the backup vendor that tapes are stored offsite

An IS auditor ran a data analytics test on a population of purchase orders and found that 15% of orders were created after the goods were received. What is the MOST appropriate next step?

Conclude that the purchasing process has a material weakness and report it immediately.

Document the finding as a control deficiency without further analysis.

Investigate the exceptions to determine if they are valid or due to data quality issues.

Expand the data analytics test to include all purchase orders to confirm the finding.

What is the purpose of interpreting data analytics results in an audit?

To provide a final audit opinion

To eliminate the need for further testing

To identify exceptions and patterns that require further audit attention

To replace the need for professional judgment

After testing a sample, what is the primary purpose of projecting the errors to the population?

To identify the specific items that contain errors

To eliminate the need for further audit procedures

To estimate the total error in the population and assess whether the audit objective is met

To determine the exact number of errors in the population

Certified Information Systems Auditor

Domain 1Objective 3

Audit Execution and Evidence CISA Practice Questions (Page 4)

Part of the Information Systems Auditing Process domain, which accounts for 18% of the CISA exam.

42questions here

9free pages

13concepts

18%of the exam

Questions 16–20

16application · medium
An IS auditor needs to verify that a data center's backup tapes are stored offsite. Which evidence collection technique is MOST appropriate?
Select an answer first
17application · medium
An IS auditor ran a data analytics test on a population of purchase orders and found that 15% of orders were created after the goods were received. What is the MOST appropriate next step?
Select an answer first
18foundation · easy
What is the purpose of interpreting data analytics results in an audit?
Select an answer first
19foundation · easy
After testing a sample, what is the primary purpose of projecting the errors to the population?
Select an answer first
20application · easy
An IS auditor is using sampling to test a population of 10,000 transactions. The auditor is concerned about the risk that the sample may not be representative of the population. Which type of risk is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CISA” is a trademark of its owner, used for identification only.