If inadequate, which of the following would be the MOST likely contributor to a denial-of-service attack?

• A.Router configuration and rules
• B.Design of the internal network
• C.Updates to the router system software
• D.Audit testing and review techniques

Comment: *

Name: *

Email: *

Verification: *

During an exit interview, senior management disagrees with some of the facts presented in the draft audit report and wants them removed from tie report. Which of the blowing would be the auditor's BEST course of action?

• A.Finalize tie draft audit report without changes
• B.Escalate the issue to audit management
• C.Gather evidence to analyze senior management's objections
• D.Revise the assessment based on senior management's objections

Comment: *

Name: *

Email: *

Verification: *

To confirm integrity for a hashed message, the receiver should use

• A.a different hashing algorithm from me sender s to create a binary image of the file
• B.the same hashing algorithm as the tender s to create a numerical representation of the file.
• C.the same hashing algorithm as the sender's to create a binary image of the file.
• D.a different hashing algorithm from the sender s to create a numerical representation of the file

Comment: *

Name: *

Email: *

Verification: *

An IS auditor conducts a review of a third-party vendor's reporting of key performance indicators (KPI). Which of the following findings should be of MOST concern to the audition?

• A.Some KPIs are not documented
• B.KPIs are not clearly defined
• C.KPI data is not being analysed
• D.KPIs have never been updated

Comment: *

Name: *

Email: *

Verification: *

During an audit of identity and access management, an IS auditory finds that the engagement audit plan does not include the testing of controls that regulate access by third parties. Which of the following would be the auditor's BEST course of action?

• A.Determine whether the risk has been identified in the planning documents
• B.Escalate the deficiency to audit management.
• C.Add testing of third-party access controls to the scope of the audit.
• D.Plan to test these controls in another audit

Comment: *

Name: *

Email: *

Verification: *