An IS auditor is asked to provide feedback on the systems options analysis for a new project. The BEST course of action for the IS auditor would be to:

• A.identify the best alternative.
• B.request at least one other alternative.
• C.comment on the criteria used to assess the alternatives.
• D.retain comments as findings for the audit report.

Comment: *

Name: *

Email: *

Verification: *

When reviewing the IT strategic planning process, an IS auditor should ensure that the plan:

• A.incorporates state of the art technology.
• B.addresses the required operational controls.
• C.articulates the IT mission and vision.
• D.specifies project management practices.

Comment: *

Name: *

Email: *

Verification: *

An organization is moving its on-site application servers to a service provider that operates a virtualized environment shared by multiple customers. Which of the following is the MOST significant risk to the organization?

• A.Competing workloads from other clients
• B.Account hacking from other clients
• C.Service provider access to organizational data
• D.Service provider limiting the right to audit

Comment: *

Name: *

Email: *

Verification: *

An organization has a recovery time objective (RTO) equal to zero and a recovery point objective (RPO)
close to 1 minute for a critical system. This implies that the system can tolerate:

• A.a data loss of up to 1 minute, but the processing must be continuous.
• B.a 1-minute processing interruption but cannot tolerate any data loss.
• C.a processing interruption of 1 minute or more.
• D.both a data less and processing interruption longer than 1 minute.

Comment: *

Name: *

Email: *

Verification: *

Performance of a biometric measure is usually referred to in terms of (choose all that apply):

• A.failure to reject rate
• B.false accept rate
• C.false reject rate
• D.failure to enroll rate
• E.None of the choices.

Comment: *

Name: *

Email: *

Verification: *