- (Exam Topic 1)
Which of the following is MOST important for an IS auditor to review when evaluating the accuracy of a spreadsheet that contains several macros?

1. A. Encryption of the spreadsheet
2. B. Version history
3. C. Formulas within macros
4. D. Reconciliation of key calculations

Correct Answer: D

- (Exam Topic 1)
Which of the following should be the PRIMARY basis for prioritizing follow-up audits?

1. A. Audit cycle defined in the audit plan
2. B. Complexity of management's action plans
3. C. Recommendation from executive management
4. D. Residual risk from the findings of previous audits

Correct Answer: D

- (Exam Topic 2)
In order to be useful, a key performance indicator (KPI) MUST

1. A. be approved by management.
2. B. be measurable in percentages.
3. C. be changed frequently to reflect organizational strategy.
4. D. have a target value.

Correct Answer: C

- (Exam Topic 2)
Due to system limitations, segregation of duties (SoD) cannot be enforced in an accounts payable system. Which of the following is the IS auditor's BEST recommendation for a compensating control?

1. A. Require written authorization for all payment transactions
2. B. Restrict payment authorization to senior staff members.
3. C. Reconcile payment transactions with invoices.
4. D. Review payment transaction history

Correct Answer: A

- (Exam Topic 3)
Which of the following should be the IS auditor's PRIMARY focus, when evaluating an organization's offsite storage facility?

1. A. Shared facilities
2. B. Adequacy of physical and environmental controls
3. C. Results of business continuity plan (BCP) test
4. D. Retention policy and period

Correct Answer: B