Isaca CISA Exam - Topic 5 Question 55 Discussion

Actual exam question for Isaca's CISA exam

Question #: 55
Topic #: 5

[All CISA Questions]

An IS auditor is analyzing a sample of accesses recorded on the system log of an application. The auditor intends to launch an intensive investigation if one exception is found Which sampling method would be appropriate?

ADiscovery sampling

BJudgmental sampling

CVariable sampling

DStratified sampling

Show Suggested Answer

Suggested Answer: A

by Mollie at Jun 15, 2022, 08:56 AM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alaine

4 months ago

Stratified sampling might be useful if there are different access levels.

upvoted 0 times

...

Catarina

4 months ago

I thought variable sampling was more common for this kind of thing.

upvoted 0 times

...

France

4 months ago

Isn't it surprising that one exception triggers such a deep dive?

upvoted 0 times

...

Chun

4 months ago

I disagree, judgmental sampling could work too.

upvoted 0 times

...

Elke

4 months ago

Discovery sampling seems like the best choice here.

upvoted 0 times

...

Jovita

5 months ago

Stratified sampling could help if there are different groups of accesses, but I feel like discovery sampling is more straightforward for this scenario.

upvoted 0 times

...

Mary

5 months ago

Variable sampling seems more about estimating values rather than finding exceptions, so I don't think that's it.

upvoted 0 times

...

Elza

5 months ago

I remember practicing with judgmental sampling for targeted investigations, but I wonder if that's the best fit here.

upvoted 0 times

...

Elmer

5 months ago

I think discovery sampling might be the right choice since it focuses on finding exceptions, but I'm not entirely sure.

upvoted 0 times

...

Alona

5 months ago

I'm a little confused by the options here. What's the difference between a private domain and a dedicated IP? And how do those help with reputation? I'll need to review my notes on email infrastructure before answering this.

upvoted 0 times

...

Martina

5 months ago

I'm a bit unsure about this one. The categorical predictor with 3 levels is throwing me off a bit. I'll need to review my notes on how to handle that in a linear model.

upvoted 0 times

...

Gail

5 months ago

I feel pretty confident about this one. Based on my understanding, the regulatory changes would likely have the most significant and far-reaching impact on the organization.

upvoted 0 times

...

Marti

5 months ago

No problem, I've got this. I just need to multiply the contribution per unit by the total units sold to get the total annual profit.

upvoted 0 times

...