Auditability CT-FT Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A test team is validating the audit trail of a new financial system. The test plan includes a scenario where a user attempts to access a restricted function. The system should log the attempt, even if it fails. Which test result would indicate a defect in the audit trail?

   • AThe audit log is empty because no access was granted.
   • BThe audit log contains an entry for the failed access attempt.
   • CThe audit log does not contain an entry for the failed access attempt.
   • DThe audit log contains an entry for the successful access of another user.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A test team is validating the audit trail of a new general ledger system. The test plan includes verifying that the audit log records the date and time of each entry. Which additional attribute is essential for the audit trail to be considered complete?

   • AThe application version number
   • BThe user ID of the person who performed the action
   • CThe IP address of the user's workstation
   • DThe database server's hostname
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A compliance officer is explaining to a new test analyst why auditability is important for a financial system. The analyst asks, 'Why can't we just rely on the database backups to prove what happened?' Which response best explains the limitation of backups?

   • ABackups are only kept for 30 days, which is too short for audits.
   • BBackups are too slow to restore in an audit.
   • CBackups only capture the state at a point in time, not the sequence of actions that led to that state.
   • DBackups are not encrypted, so they cannot be used as evidence.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a key component of an audit trail for a financial system?

   • AThe list of all employees who have access to the financial system
   • BThe current market value of all assets held by the organization
   • CThe backup schedule for the financial database
   • DThe timestamp of each transaction, including who performed it and what changes were made
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A compliance auditor is reviewing the audit trail of a financial system and needs to verify that the log entries cannot be altered by unauthorized users. Which audit trail component is most important for this verification?

   • AThe color scheme of the audit log viewer.
   • BThe frequency of log backups.
   • CWrite-protection and access controls on the audit log.
   • DThe size of the audit log file.
   Reveal Solution Discussion Select an answer first