When reviewing the configuration of network devices, an IS auditor should FIRST identify:

• A.the best practices for the type of network devices deployed.
• B.whether components of the network are missing.
• C.the importance of the network device in the topology.
• D.whether subcomponents of the network are being used appropriately.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST advantage of application penetration testing over vulnerability
scanning?

• A.Penetration testing does not require a special skill set to be executed.
• B.Penetration testing provides a more accurate picture of gaps in application controls.
• C.Penetration testing can be conducted in a relatively short time period.
• D.Penetration testing creates relatively smaller risks to application availability and integrity.

Comment: *

Name: *

Email: *

Verification: *

An IS auditor has completed a review of an outsourcing agreement and has communicating the issues at a meeting with senior management?

• A.Provide a plan of action and milestones.
• B.Present an overview highlighting the key findings.
• C.Provide a detailed report in advance and open the floor to questions.
• D.Present a completed report and discuss the details.

Comment: *

Name: *

Email: *

Verification: *

The application systems quality assurance (QA) function should:

• A.assist programmers in designing and developing applications.
• B.compare programs to approved system changes.
• C.design and develop quality applications by employing system development methodology.
• D.ensure adherence of programs to standards.

Comment: *

Name: *

Email: *

Verification: *

Which of the following hardware devices relieves the central computer from performing network control,
format conversion and message handling tasks?

• A.Spool
• B.Cluster controller
• C.Protocol converter
• D.Front end processor

Comment: *

Name: *

Email: *

Verification: *