System Readiness and Implementation Testing CISA Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A financial institution is migrating from a legacy core banking system to a new platform. The data conversion team has completed a test migration and reconciled record counts. The business analyst reports that the total number of records matches the source system. However, the IS auditor notices that the test migration did not include a verification of data values for a sample of high-value transactions. What is the most appropriate next step?

   • APerform a data validation test that compares source and target values for a statistically significant sample of transactions.
   • BConduct a post-implementation review to identify data issues after go-live.
   • CAsk the business to manually re-enter all transactions after cutover to ensure accuracy.
   • DProceed with the cutover because the record counts match, which is sufficient evidence of data integrity.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A multinational corporation is implementing a new expense management system. The UAT is planned for users in three different time zones. The project manager wants to conduct UAT in a single week to meet the go-live deadline. The IS auditor notes that the UAT script is comprehensive but does not include any time-zone-specific scenarios. What is the most significant risk?

   • AUsers in different time zones will not be able to access the system during UAT.
   • BThe system may not handle time-zone differences correctly, leading to errors in expense reporting and approvals.
   • CThe UAT will take longer than one week because of time-zone differences.
   • DThe system will be slower for users in certain time zones.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of a post-implementation review?

   • ATo assess whether the system meets its objectives and to identify lessons learned.
   • BTo plan the system's future enhancements.
   • CTo develop the system's user manual.
   • DTo test the system's performance under peak load conditions.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a key environmental factor to consider in a system readiness assessment?

   • AThe vendor's warranty period for the software license.
   • BThe availability of the production hardware and network infrastructure required to support the new system.
   • CThe number of test cases that have been executed successfully.
   • DThe programming language used to develop the application.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A financial services firm is implementing a new trading system. The go-live is scheduled for the end of the quarter. The IS auditor's readiness assessment reveals that the disaster recovery plan for the new system has not been tested, and the data migration is only 50% complete. The project manager argues that the go-live should proceed because the system is functionally complete. What is the most appropriate response?

   • ARecommend that the go-live be delayed until the disaster recovery plan is tested and data migration is complete.
   • BProceed with go-live because the system is functionally complete and the remaining items can be addressed after.
   • CSuggest that the disaster recovery plan be tested after go-live to save time.
   • DRecommend that the data migration be completed but the DR test be skipped.
   Reveal Solution Discussion Select an answer first