Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CISA 1.0 - ISACA > Doshi Domain 1 Flashcards > Flashcards

Doshi Domain 1 Flashcards

1
Q

For compliance testing which sampling method is more useful ?

(a) Variable Sampling (b) Attribute Sampling

A

(b) Attribute Sampling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

A rerun procedure is an example of:

(a)Preventive controls Or (b) Corrective controls

A

(b) Corrective controls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Purpose of CSA is to:

(a) enhance the audit responsibilities or (b) replace the audit function.

A

(a) enhance the audit responsibilities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Internal Audit function should be __________ and report directly to Audit Committee or board of director.

A

Independent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

For higher confidence coefficient sample size should be (a) high or (b) low

A

(a) high

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

__________ is a weakness or gap in our protection efforts. It can be in form of weak coding, missing anti-virus, weak access control and other related factors. It can be controlled by us.

(a)vulnerability or (b) threat

A

(a)vulnerability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

An IS auditor should use statistical sampling and not judgment (non-statistical) sampling, when:

A

the probability of error must be objectively quantified.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What should be role of an IS auditor in a control self-assessment (CSA) process?

A

As a facilitator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

A contingency planning is an example of:

(a)Preventive controls Or (b) Corrective controls

A

(b) Corrective controls

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

In __________ testing we gather evidence with the objective of testing an organization’s compliance with control procedures.

(a)Compliance testing Or (b) Substantive testing

A

(a)Compliance testing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

For substantive testing which sampling method is more useful ?

(a) Variable Samplingor (b)Attribute Sampling

A

(a) Variable Sampling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Audit Charter should include detailed yearly audit calendar, audit planning, yearly resource allocation and other routine audit activities.

True or False

A

FALSE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are the objective of control self assessment?

A

THREAT

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which of the following is an objective of a control self-assessment (CSA) program?

(a) Concentration on areas of high risk Or (b) Replacement of audit responsibilities

A

(a) Concentration on areas of high risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which of the following online auditing techniques is most effective for the early detection of errors or irregularities?

(a) Embedded audit module Or (b) Audit hooks

A

(b) Audit hooks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

The PRIMARY purpose of an audit charter is to:
(a) describe the authority and responsibilities of the audit department. Or (b) formally document the audit department’s plan of action.

A

(a) describe the authority and responsibilities of the audit department.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Risk is the combination of __________ of occurrence of an event and its __________.

A

Risk is the combination of probability of occurrence of an event and its consequences.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which testing involves checking the details of the transactions?

(a) Compliance testing or (b) Substantive testing

A

(b) Substantive testing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

The __________ ideally lists all of the processes that may be considered for the audit.

A

audit universe

20
Q

In __________ testing, we gather evidence to evaluate the integrity of data, a transaction or other information.

(a)Compliance testing Or (b) Substantive testing

A

(b) Substantive testing

21
Q

Risk that a misstatement could occur but may not be detected and corrected or prevented by entity’sinternal controlmechanism is called

A

Control Risk

22
Q

What are the objective of control self assessment?

(i)To concentrate on areas of high risk and (ii) To enhance control monitoring by functional staff.

A

.

23
Q

For compliance testing which sampling method is more useful ?

(a) Variable Sampling or (b) Attribute Sampling

A

(b) Attribute Sampling

24
Q

(i) Controls designed to correct the errors or irregularities that have been detected are known as __________.
(ii) Controls designed to prevent errors or irregularities from occurring are known as __________.
(iii) Controls designed to detect errors or irregularities that may have occurred are known as __________.
(iv) Controls that reduce the likelihood of a deliberate act to cause a loss or an error are known as __________.

A

(i) Controls designed to correct the errors or irregularities that have been detected are known as corrective controls.
(ii) Controls designed to prevent errors or irregularities from occurring are known as preventive controls.
(iii) Controls designed to detect errors or irregularities that may have occurred are known as detective controls.
(iv) Controls that reduce the likelihood of a deliberate act to cause a loss or an error are known as deterrent controls.

25
Q

First step of Risk Assessment is to (a) identify the risk or (b) identify the assets.

A

(a) Identify the Assets

26
Q

Sampling method to be used when the probability of error must be objectively quantified (i.e no subjectivity is involved).

A

Statistical sampling

27
Q

The risk that remainsafter controlsare taken into account (the net risk or risk after controls) is called:

A

Residual Risk

28
Q

A backup procedure is an example of:

(a)Preventive controls Or (b) Corrective controls

A

(b) Corrective controls

29
Q

The PRIMARY objective of an IS audit function is to:

(a) determine whether information systems safeguard assets and maintain data integrity Or (b) determine the ability of the organization to detect fraud.

A

(a) determine whether information systems safeguard assets and maintain data integrity

30
Q

The document used by the top management of organizations to delegate authority to the IS audit function is known as __________.

A

audit charter

31
Q

Which of the following tests is an IS auditor performing when a sample of programs is selected to determine if the source and object versions are the same?

(a )A substantive test of program library controls
(b )A compliance test of program library controls
(c) A compliance test of the program compiler controls
(d) A substantive test of the program compiler controls

A

(b) A compliance test of program library controls

32
Q

__________ is a technique that allows managers and work teams directly involved in business units, functions or processes to participate in assessing the organization’s risk management and control processes.

A

Control self-assessment (CSA)

33
Q

In any given scenario, compliance testing checks for the presence of controls whereas substantive testing checks the integrity of contents i.e. test of individual transactions.

True or False

A

TRUE

34
Q

An integrated test facility is considered a useful audit tool because it uses the programs to compare processing using independently calculated data.

True or False

A

TRUE

35
Q

(i) __________ sampling is used when an auditor is trying to determine whether a type of event has occurred, and therefore it is suited to assess the risk of fraud and to identify whether a single occurrence has taken place.
(ii) __________sampling is used when auditor believes that very few errors will be found. It prevents excessive sampling by allowing an audit test to be stopped at the earliest possible moment.

A

(i) Discovery sampling is used when an auditor is trying to determine whether a type of event has occurred, and therefore it is suited to assess the risk of fraud and to identify whether a single occurrence has taken place.
(ii) Stop-or-go-sampling is used when auditor believes that very few errors will be found. It prevents excessive sampling by allowing an audit test to be stopped at the earliest possible moment.

36
Q

Overall business risk for a particular threat can be expressed as:
(a) a product of the probability and impact. Or (b) probability of occurrence.

A

(a) a product of the probability and impact.

37
Q

An “Echo” message in telecommunications protocol is an example of

(a)Detective controls Or (b) Preventive controls

A

Detective controls

38
Q

It should be noted that __________ is an overarching document that covers the entire scope of audit activities in an entity while an __________ is more focused on a particular audit exercise that is sought to be initiated in an organisation.

A

It should be noted that an audit charter is an overarching document that covers the entire scope of audit activities in an entity while an engagement letter is more focused on a particular audit exercise that is sought to be initiated in an organisation.

39
Q

Use access control software that allows only authorized personnel to access sensitive files is an example of

(a) Preventive controls Or (b) Detective controls

A

(a) Preventive controls

40
Q

Risk assessment is:

(a) subjective or (b)objective.

A

(a) subjective.

41
Q

Audit Charter should be static in nature and should be changed only if change can be thoroughly justified.

True or False.

A

TRUE

42
Q

An audit charter should document the audit procedures designed to achieve the planned audit objectives.

True or False

A

FALSE

43
Q

__________ testing checks for the presence of controls whereas __________ testing checks the integrity of contents.

A

Compliance testing checks for the presence of controls whereas substantive testing checks the integrity of contents.

44
Q

What is the most important success factor for CSA?

A

Involvement of Line Management.

45
Q

An integrated test facility is considered a useful audit tool because it uses the sprograms to compare processing using independently calculated data.

True or False

A

TRUE

46
Q

Confidence coefficient is a probability that sample are true representation of the population.

(i) When internal controls are strong, confidence coefficient /sample size may be __________
(ii) When internal controls are weak, confidence coefficient /sample size need to be __________

A

(i) When internal controls are strong, confidence coefficient /sample size may be lowered.
(ii) When internal controls are weak, confidence coefficient /sample size need to be increased.

CISA 1.0 - ISACA (51 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions