CISA Certified Information Systems Auditor – Question0096

An IS auditor is analyzing a sample of accesses recorded on the system log of an application. The auditor intends to launch an intensive investigation if one exception is found. Which sampling method would be appropriate?

A.
Discovery sampling
B. Variable sampling
C. Stratified sampling
D. Judgmental sampling

Correct Answer: A