When reviewing a business process reengineering (BPR) project, which of the following is the MOST important for an IS auditor to evaluate? A. The impact of removed controls. B. The cost of new controls. C. The BPR project plans. D. The continuous improvement and monitoring plans.
1 5455An IS auditor reviews an organization chart PRIMARILY for: A. an understanding of workflows. B. investigating various communication channels. C. understanding the responsibilities and authority of individuals. D. investigating the network connected to different employees.
1 9353An IS auditor performing a review of the EFT operations of a retailing company would verify that the customers credit limit is checked before funds are transferred by reviewing the EFT: A. system's interface. B. switch facility. C. personal identification number generating procedure. D. operation backup procedures.
1 6376An IS auditor performing an access controls review should be LEAST concerned if: A. audit trails were not enabled. B. programmers have access to the live environment. C. group logons are being used for critical functions. D. the same user can initiate transactions and also change related parameters.
1 5888An IS auditor reviewing back-up procedures for software need only determine that: A. object code libraries are backed up. B. source code libraries are backed up. C. both object and source codes libraries are backed up. D. program patches are maintained at the originating site.
1 4567During a review of a large data center an IS auditor observed computer operators acting as backup tape librarians and security administrators. Which of these situations would be MOST critical to report? A. Computer operators acting as tape librarians B. Computer operators acting as security administrators C. Computer operators acting as a tape librarian and security administrator D. It is not necessary to report any of these situations.
1 4412The MAJOR concern for an IS auditor when reviewing an organization's business process reengineering (BRP) efforts is: A. cost overrun of the project. B. employees resistance to change. C. key controls may be removed from a business process. D. lack of documentation of new processes.
1 3769When performing a review of the structure of an electronic funds transfer (EFT) system, an IS auditor observes that the technological infrastructure is based on a centralized processing scheme that has been outsourced to a provider in another country. Based on this information, which of the following conclusions should be the main concern of the IS auditor? A. There could be a question with regards to the legal jurisdiction. B. Having a provider abroad will cause excesive costs in future audits. C. The auditing process will be difficult because of the distances. D. There could be different auditing norms.
2 5443An IS auditor conducting an access controls review in a client-server environment discovers that all printing options are accessible by all users. In this situation, the IS auditor is MOST likely to conclude that: A. exposure is greater since information is available to unauthorized users. B. operating efficiency is enhanced since anyone can print any report, any time. C. operating procedures are more effective since information is easily available. D. user friendliness and flexibility is facilitated since there is a smooth flow of information among users.
2 7447An IS auditor performing a review of the IS department discovers that formal project approval procedures do not exist. In the absence of these procedures the IS manager has been arbitrarily approving projects that can be completed in a short duration and referring other more complicated projects to higher levels of management for approval. The IS auditor should recommend as a FIRST course of action that: A. users participate in the review and approval process. B. formal approval procedures be adopted and documented. C. projects be referred to appropriate levels of management for approval. D. the IS manager's job description be changed to include approval authority.
2 5334When reviewing a system development project at the project initiation stage, an IS auditor finds that the project team is following the organization's quality manual. To meet critical deadlines the project team proposes to fast track the validation and verification processes, commencing some elements before the previous deliverable is signed off. Under these circumstances, the IS auditor would MOST likely: A. report this as a critical finding to senior management. B. accept that different quality processes can be adopted for each project. C. report to IS management the team's failure to follow quality procedures. D. report the risks associated with fast tracking to the project steering committee.
1 6389The review of router access control lists should be conducted during a/an: A. environmental review. B. network security review. C. business continuity review. D. data integrity review.
1 9775An IS auditor reviewing an outsourcing contract of IT facilities would expect it to define the: A. hardware configuration. B. access control software. C. ownership of intellectual property. D. application development methodology.
1 9458During a post-implementation review of an enterprise resource management system, an IS auditor would MOST likely: A. review access control configuration. B. evaluate interface testing. C. review detailed design documentation. D. evaluate system testing.
1 6005When performing a general controls review, an IS auditor checks the relative location of the computer room inside the building. What potential threat is the IS auditor trying to identify? A. Social engineering B. Windstorm C. Earthquake D. Flooding
1 4932
When a non-conformance is noted during these "reviews", what happens next?
About peer reviews ?
PLEASE SEND ME THE DOCUMENTS IF ANY ONE HAVE REGARDING THE IMPACT ANALYSYS,REVIEWS
types of reviews?Advantages of reviews? Diff between process and procedure? diff b/w verification and validation? diff b/w cmm,cmmi? exp tqm,gqm,iso,ieee? Roles and responsibilities of tester? Ricks,types of ricks? what r Quality factors?
I am asked to create Usability testing methodology document, basically listing the Procedures & methodology to/for: a. Entry criteria Exit criteria for usability test b. Deliverables d. Methods of doing Reviews and inspection e. Methods of Reporting f. at which testing phase usability testing is done in v model Is there any sample document/template available on Internet? Any help will be greatly appreciated.
explain with examples what r the roles & Responsiblities of a functional consultant who reviews the Test Scripts, Test Cases and Test Execution Results of AP, FA and GL.
Sir, Iam Applied in rrb for the posts of Junior Engineer.I want to know about the or question previews to study well.Pl send it to shukla_varun1985@yahoo.com.
To my surprise,my visa interview was too short and shocking. I had 1310 in gre and 109 in toefl. I completed BE in Elect and comm with 75% in 2007 and had been working in a multinational software company since then. i applied for masters in elect and comm in Lamar university with 60% fee waiver.. here goes the interview VO:( took my documents) how many universities??(raising his eyebrow) Me:2 VO: Looking at me with questioning eyes? Me: Lamar university, Texas and Cleveland State University, Ohio. VO: Why did u apply for Cleveland University? Me: This is a good university, i got good reviews about this university from online forums and communities and it was offering me right courses in computer networking along with other courses in Electrical Engineering..... VO: Interrupted... it is not a very high ranking university, how can u say its a good university? Me: Ranking of the university was not my sole criteria... VO: Interrupted... ohh!!! (sarcastically) what was your criteria? Me: I focused on the department and the courses that were being offered.. Moreover, I got good feedback.... VO: Go.. Me: ok. can u give me the reason? VO: next one come.. I don't understand what went wrong?
1.explain end to end process of qc,2.how many tabs are in qc9.0,qc10.0 3.what is review, how many reviews are following in aproject 4.how will you get the requirements 5.why do we choose testing 6.how to export tc's and requirements to qc through add-ins
Performance reporting tools and techniques include all of the following except: A. Earned value analysis B. Statistical sampling C. Variance analysis D. Performance reviews
The purpose of a quality audit includes all of the following except: A. Examines the work of the project and formally accepts the work results B. Determines how the project is progressing and makes corrections C. Identifies lessons learned D. Reviews quality management activities to ensure the right quality elements are being examined
All of the following are tools and techniques of the Performance Reporting process except: A. Variance analysis B. Performance reporting C. Information distribution D. Performance reviews
You are a project manager for Dutch Harbor Consulting. Your latest project involved the upgrade of an organization's operating system on 236 servers. You performed this project under contract. You are in the Contract Closeout process and have reviewed the contracting process to identify lessons learned. What is the name of the tool and technique of Contract Closeout you used to perform this function? A. Procurement audits B. Performance reviews C. Performance audits D. Procurement reviews
You are a project manager for Penguin Software. Your company creates custom software programs for hospitals and large dental offices. You have just completed a project and are performing earned value analysis, trend analysis, and performance reviews. Which of the following is true? A. This is performance measurement documentation, which is an input to the Contract Closeout process B. This is performance measurement documentation, which is an input to the Administrative Closure process C. These are performance reporting tools and techniques of the Administrative Closure process D. These are performance reporting tools and techniques of the Contract Closeout process
Could reviews or inspections be considered part of testing?