CISA Domain 2B-1 Practice Test 002

This practice test covers Domain 2 (Governance & Management of IT) Subdomain B-1 (IT Resource Management) from the CISA exam content outline.

These questions are inspired by the ISACA CISA exam and are designed to help you test your knowledge of information systems auditing, governance, risk management, IT operations, business resilience, and information asset protection.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the audit judgment, control evaluation, and risk-based decision-making skills tested in the CISA exam.

Note: CISA and Certified Information Systems Auditor are registered trademarks of ISACA. This content is not affiliated with or endorsed by ISACA.

To choose CISA practice tests based on specific domains and subdomains, click that link.

CISA 2B-1 IT Resource Management Practice Test 002

10 questions • Single best answer

Question 1

A chief audit executive at a state transportation department is reviewing IT resource management for the agency's traffic management systems. One database administrator supports every mission-critical database, no operating procedures are documented, and the administrator has not taken leave in two years. Which recommendation is MOST appropriate?

A. Engage an external consultant to document all current database configurations B. Cross-train a backup administrator and enforce a mandatory leave requirement C. Deploy database activity monitoring to review the administrator's privileged actions D. Require the administrator to sign an updated confidentiality and conduct agreement

Question 2

A manufacturing company allocates all IT costs to its business units equally, based on headcount. During an audit of IT resource management, the IS auditor learns that two engineering divisions consume most of the computing and storage capacity, while smaller administrative units pay the same per-employee rate. Which is the MOST significant risk of this allocation method?

A. Total IT spending will exceed the approved annual budget forecast B. IT staff will lack visibility into business unit project priorities C. Consolidated financial statements will misstate total IT expenditure D. Business units have little incentive to manage their IT resource consumption

Question 3

An internal audit team at a regional credit union is assessing whether IT staff have the competencies required to support a new core banking platform. Management states that all staff are qualified and points to recent hiring. Which of the following provides the BEST evidence that IT staff competencies are adequate?

A. A skills inventory mapped to role requirements, with training records for identified gaps B. Signed job descriptions for each IT position retained in human resources personnel files C. Interviews with IT managers describing the specific capabilities of their team members D. A count of professional certifications currently held across the IT department

Question 4

During an audit of a national retail chain, an IS auditor finds that 30 percent of enterprise software licenses are unassigned. At the same time, several departments purchase additional licenses for the same products using corporate credit cards and do not report them to IT. Which recommendation is MOST appropriate?

A. Cancel all unassigned enterprise licenses at the next contract renewal date B. Prohibit departments from using corporate credit cards for any IT-related purchases C. Centralize license tracking and route all license requests through IT procurement D. Commission a vendor compliance audit to confirm the total licenses in use

Question 5

A cloud services provider relies on contractors for 40 percent of its IT workforce. An IS auditor finds that several contractors retained system access weeks after their engagements ended, because project managers are responsible for notifying IT administrators informally. Which control would provide the BEST assurance that contractor access is removed promptly?

A. Linking contract end dates in the vendor system to automated deprovisioning B. Quarterly user access reviews performed by each responsible project manager C. Signed contractor acknowledgments of access termination terms at onboarding D. Human resources notifying IT administrators once contractor invoices have stopped

Question 6

An insurance company's IT steering committee sets each year's IT budget by taking the prior year's actual spend and adding five percent. An IS auditor evaluating whether IT resources support the organization's objectives notes that the company recently announced a strategy shift toward digital claims processing. Which is the GREATEST concern?

A. Annual IT cost growth may outpace general inflation over time B. Budget variance reports may not reflect actual departmental usage C. Committee members may lack the technical expertise to review budgets D. Funding may not be directed to initiatives supporting the new strategy

Question 7

An audit manager is planning an engagement to evaluate IT resource management at a multi-hospital health system. IT staff overtime has doubled over the past year, several clinical system upgrades are behind schedule, and turnover is rising. Which should the IS auditor review FIRST to establish the audit approach?

A. Overtime payroll records to identify potential abuse of overtime approvals B. The IT strategic plan and workforce plan defining expected resource needs C. Results of the most recent employee engagement survey for IT personnel D. Service desk ticket resolution times across each hospital location

Question 8

An IS auditor reviewing IT performance reporting at a logistics company notes that management highlights a sustained 98 percent utilization rate for application support staff as proof of efficient resource management. Project backlogs are growing and urgent incidents often wait days for assignment. Which conclusion is MOST appropriate based on the evidence?

A. IT resources are being managed efficiently and in alignment with business needs B. Support staffing could be reduced further to lower overall operating costs C. Staff capacity appears insufficient to absorb unplanned work and priorities D. The utilization metric is unreliable and should be removed from reporting

Question 9

Following budget cuts, a municipal government reassigned an application developer to production support. An IS auditor finds the developer still holds rights to modify source code and can migrate changes into production without approval, and management states that additional hiring is not possible this fiscal year. Which recommendation is MOST appropriate?

A. Require independent review and approval of all production changes by this developer B. Transfer the change migration responsibility to service desk analysts on rotation C. Formally accept the risk because the staffing constraint is documented by management D. Return the developer to the development team and suspend production support duties

Question 10

A freight forwarding company has decided to keep critical warehouse servers in service two years beyond vendor end of support in order to redirect hardware funds to a new customer portal. An IS auditor evaluating IT resource decisions wants to determine whether this decision was appropriate. Which is the BEST evidence?

A. Vendor confirmation that extended support can be purchased if needed B. Server uptime and performance statistics for the previous twelve months C. A memo from the IT manager explaining the current budget constraints D. An approved risk and cost-benefit analysis signed by the business owner

Related Posts

Leave a Comment Cancel Reply