How many questions are on the CISA exam?

C. Periodically comparing control and current object and source programs

Running the code comparison program on the control and current object and source programs allows for the detection of unauthorized changes in the production environment. Choices A, B and D are preventive controls that are effective as long as they are being applied consistently.