Certified Information Systems Auditor CISA · Free Practice Question Medium

Question 97

You are an information system auditor of HDA Inc. You have noted that an application was generating transactions without the proper sequence, but management has confirmed that the system now generates the proper sequence. What is the best way to validate this?
  • A A. Review the system's access controls and user permissions.
  • B B. Conduct a review of the application's data validation rules.
  • C C. Verify the system settings and transaction logs to validate whether orders are generated in the correct sequence.
  • D D. Perform a reconciliation of the generated transactions with the corresponding source documents.
Reveal correct answer

Correct answer: C

Explanation

Correct Answer: C. Verify the system settings and transaction logs to validate whether orders are generated in the correct sequence. Explanation: The best way to validate whether the system is now generating transactions in the proper sequence is to verify the system settings and transaction logs. By examining the system settings, the auditor can ensure that the necessary configurations have been updated to enforce the proper sequencing of orders. Additionally, reviewing the transaction logs allows the auditor to trace the sequence of generated orders and confirm if they align with the expected sequence. Option A suggests reviewing access controls and user permissions, which is important for ensuring data security and preventing unauthorized access but does not directly address the sequencing issue. Option B suggests conducting a review of data validation rules, which can be relevant for data integrity but may not specifically address the sequencing of transactions. Option D suggests performing a reconciliation of the generated transactions with source documents, which is a valid control measure but may not provide direct confirmation of the proper sequencing. Validating the system settings and transaction logs is the most direct and effective approach to confirm whether the application now generates orders in the correct sequence.

Discussion

Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.

You must be logged in to post a comment.

Preparing For

Your Certification?

255+ certifications
Detailed explanations
Free PDF samples

Has All The Questions You Need