System Readiness and Implementation Testing CISA Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A bank is converting customer account data from a legacy system to a new core banking platform. The migration plan includes a full data conversion test, but the IS auditor observes that the test environment uses a subset of data that does not include all account types. What is the most significant risk?

   • AThe migration team will not be able to reconcile record counts.
   • BThe test environment is slower than production, so the migration will take longer than expected.
   • CThe test will produce too much data, overwhelming the test environment.
   • DThe migration may fail for account types not included in the test, leading to data loss or corruption.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   During a system readiness assessment, which activity is the IS auditor most likely to perform?

   • AApproving the final budget for the system development project.
   • BExecuting test cases to verify that the system functions according to the functional specifications.
   • CDesigning the data migration scripts to convert legacy data to the new system format.
   • DReviewing the project plan to confirm that all required resources, including staffing and infrastructure, are available before go-live.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which of the following is a key check to perform during data migration testing?

   • AComparing record counts and data values between the source and target systems.
   • BConfirming that all users have been trained on the new system.
   • CEnsuring that the system's backup and recovery procedures are in place.
   • DVerifying that the system's response time meets service level agreements.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A manufacturing company is preparing to implement a new enterprise resource planning (ERP) system. The go-live date is in three weeks. The IS auditor reviews the readiness assessment and finds that the data migration is not yet complete, and the user training has not been scheduled. What is the most appropriate recommendation?

   • ADelay the go-live until data migration and user training are completed and validated.
   • BProceed with go-live as scheduled and address data and training issues after implementation.
   • CReduce the scope of data migration to include only current-year data to save time.
   • DCancel the implementation and return to the legacy system.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A government agency is implementing a new case management system. The UAT phase is scheduled for two weeks, but the business users are also required to perform their regular duties during this period. The project manager proposes to shorten UAT to one week to minimize disruption. What is the most appropriate action for the IS auditor?

   • AAccept the shortened UAT because the system was already tested by the IT team.
   • BSuggest that UAT be performed by the project team instead of business users to save time.
   • CProceed with the shortened UAT and rely on post-implementation review to catch issues.
   • DRecommend that UAT be conducted with dedicated time and resources to ensure adequate coverage of business scenarios.
   Reveal Solution Discussion Select an answer first