CISA Exam QuestionsBrowse all questions from this exam

CISA Exam - Question 34


When planning an audit to assess application controls of a cloud-based system, it is MOST important for the IS auditor to understand the:

Show Answer
Correct Answer: BD

When planning an audit to assess application controls of a cloud-based system, it is most important for the IS auditor to understand the architecture and cloud environment of the system. This knowledge provides essential insights into how the application controls are implemented and operated within the cloud-based system. The cloud environment introduces unique considerations and complexities that must be comprehended to effectively evaluate the application controls. Understanding the structure, data flow, and various components involved is crucial for a thorough and effective audit.

Discussion

17 comments
Sign in to comment
KNasciOption: D
Sep 27, 2022

I disagree that it should be C. when you are planning an audit, this should be risk-based, and therefore, one should have an understanding of the business process before one can assess how critical this system is

analuisamoreira
Jun 20, 2024

The problem with C, is that it's about "business area" and not "business process supported by the system"

IdkanythingOption: D
Nov 8, 2023

Hemang Doshi: For effective audit planning, it is of utmost importance that the IS auditor has a thorough understanding of business process applications and controls.

murphsealOption: C
Sep 6, 2022

Definitely, C. Audits evaluates conformity to policy. You can't do that without knowing what the applicable policies are.

maderon
Sep 8, 2022

Coming to say the same. Answer should be C

SupermanOption: B
Apr 21, 2023

Answer B: architecture and cloud environment of the system Explanation: When planning an audit to assess application controls of a cloud-based system, it is most important for the IS auditor to understand the overall architecture and design of the cloud-based system. The auditor should have a clear understanding of how the system is structured and how data flows through the system, including the various components and applications involved. Chart CBT

AlizadeOption: B
May 6, 2023

B. architecture and cloud environment of the system.

EBTURKOption: B
May 28, 2023

Understanding the architecture and cloud environment of the system is crucial because it provides essential insights into how the application controls are implemented and operated within the cloud-based system. The cloud environment introduces unique considerations and complexities that must be comprehended to effectively evaluate the application controls.

LilikOption: C
Oct 14, 2022

C in my opinnion is the correct answear also

test5y7kqOption: D
Dec 19, 2022

I'd go for D, but the answer could well also be C. Why does CISA set very vague questions?

saado9Option: B
Mar 30, 2023

why not B. architecture and cloud environment of the system.?

i91290Option: C
Jun 19, 2023

I thought C is right answer

MakachaOption: C
Nov 30, 2023

Definitely, C. Audits evaluates conformity to policy. You can't do that without knowing what the applicable policies are.

RachyOption: B
Dec 29, 2023

You need to understand how the environment work before you can begin any audit in cloud environment. Architecture understanding is essential

MJORGER
Jan 2, 2024

I agree 100%

SwallowsOption: B
Apr 12, 2024

Cloud-based systems have different characteristics and risks than traditional on-premise systems. As such, auditors need a detailed understanding of the system's architecture and cloud environment.

Swallows
Jul 14, 2024

From my perspective as an IS auditor, I have come to believe that the most important answer is not the cloud technology, but the business processes supported by the system.

5b56aaeOption: B
Apr 15, 2024

first to understand the architecture

godusimOption: D
May 11, 2023

Application contol : the most importance is to understanding biz process Gitc:understanding- policy So. My choice:D

a84nOption: B
Apr 25, 2024

Answer: B

SwallowsOption: D
Jul 14, 2024

From my perspective as an IS auditor, I have come to believe that the most important answer is not the cloud technology, but the business processes supported by the system.