Practice Test 5 - CPA Isc
20 questions. Answer them in any order, then submit to see your score and every explanation.
- During a disaster recovery test, the IT team discovers they cannot restore data from a six-month-old backup tape. The most likely cause and the preventive control that should have been in place is:
- A company imports customer data from an external source into its CRM system. Before loading the data, the company should perform which of the following data quality procedures?
- Which of the following correctly identifies the phases of a typical incident response lifecycle?
- Which of the following incident management controls most directly ensures that critical IT incidents are appropriately prioritized?
- The privacy principle of 'purpose limitation' means that:
- Which of the following scenarios represents a data governance failure?
- An organization implements role-based access controls (RBAC) to restrict employees from viewing payroll records unless they are in the HR department. This control primarily supports which CIA triad principle?
- Which of the following is a key principle of the COBIT 2019 framework?
- A financial institution discovers that an attacker intercepted and modified wire transfer instructions during transmission, changing the destination account. Which CIA triad principle was violated?
- Which of the following best describes 'data completeness' as a dimension of data quality?
- Which of the following is the primary security control that mitigates the risk of credential stuffing attacks?
- An organization uses certificate-based authentication for system-to-system API calls. Which of the following represents the most significant risk if certificate management controls are weak?
- RAID 1 mirrors all writes. Which data loss requires backups?
- A company transfers personal data of EU residents to a U.S.-based cloud provider. Under GDPR, which mechanism could legitimize this data transfer?
- An organization upgrades its financial system. The old chart of accounts has 500 accounts and the new system has a revised structure with 450 accounts. Which of the following migration controls is most important?
- An organization uses a complex Excel spreadsheet developed by the CFO to calculate quarterly bonus accruals. This spreadsheet is used to record journal entries totaling $2 million per quarter. The primary risk associated with this EUC tool is:
- During an audit of product master data controls, the auditor finds that product prices in the master data file can be overridden at the time of sale by any sales representative. The primary risk of this configuration is:
- An auditor evaluating change management at a company using an outsourced IT provider should most importantly:
- An auditor finds that an organization's ITGC framework is comprehensive but has not been updated in four years. Significant technology changes have occurred, including migration to cloud infrastructure and adoption of new ERP modules. The primary risk is:
- Under the principle of 'accountability' in GDPR, organizations are required to: