How does auditability contribute to data integrity in financial systems?

By restricting access to financial data to only the finance department

By automatically correcting any data entry errors in the system

By providing a complete and unalterable record of all changes, allowing detection of unauthorized modifications

By ensuring that all data is stored in an encrypted format

In the context of finance testing, what does 'auditability' primarily refer to?

The ability of a system to be examined by an external auditor without prior notice

The capability of a system to provide a clear, verifiable record of financial transactions and processes for review

The process of conducting an internal audit of a financial system's performance

The requirement that all financial data be stored in a single, centralized database

What does 'traceability of transactions' mean in the context of auditability?

The ability to trace the transaction's impact on the company's stock price

The ability to trace the IP address of the user who initiated the transaction

The ability to trace the transaction to the specific hardware device used

The ability to follow a transaction from its initiation through all processing steps to its final reporting

A financial institution is implementing a new system that must comply with the Payment Card Industry Data Security Standard (PCI DSS). The compliance team is defining audit trail requirements for the system. Which requirement is specifically mandated by PCI DSS?

Logging all access to cardholder data and tracking user actions.

Storing audit logs for at least one year.

Encrypting audit logs with a minimum of 256-bit encryption.

Reviewing audit logs at least once per week.

When testing for auditability, what is the purpose of attempting to modify a transaction record directly in the database?

To improve the performance of the database by optimizing the transaction table

To check that the database is accessible to all users with the correct permissions

To verify that the audit trail is tamper-evident and that unauthorized changes are detected

To ensure that the transaction record is stored in the correct format

Certified Tester Finance Testing

Domain 2Objective 5

Auditability CT-FT Practice Questions (Page 4)

Part of the Compliance Testing domain, which makes up ~23% of our current practice bank. ISTQB does not publish an official question count, but from its 60-minute exam (~25–40 total, ~6–9 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

5concepts

Questions 16–20

16foundation · easy
How does auditability contribute to data integrity in financial systems?
Select an answer first
17foundation · easy
In the context of finance testing, what does 'auditability' primarily refer to?
Select an answer first
18foundation · easy
What does 'traceability of transactions' mean in the context of auditability?
Select an answer first
19application · medium
A financial institution is implementing a new system that must comply with the Payment Card Industry Data Security Standard (PCI DSS). The compliance team is defining audit trail requirements for the system. Which requirement is specifically mandated by PCI DSS?
Select an answer first
20foundation · easy
When testing for auditability, what is the purpose of attempting to modify a transaction record directly in the database?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CT-FT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISTQB. “CT-FT” is a trademark of its owner, used for identification only.