A call-back system requires that a user with an id and password call a remote server through a dial-up line,
then the server disconnects and:

• A.dials back to the user machine based on the user id and password using a telephone number from its
  database.
• B.dials back to the user machine based on the user id and password using a telephone number provided
  by the user during this connection.
• C.waits for a redial back from the user machine for reconfirmation and then verifies the user id and
  password using its database.
• D.waits for a redial back from the user machine for reconfirmation and then verifies the user id and
  password using the sender's database.

Comment: *

Name: *

Email: *

Verification: *

An IS auditor observes a weakness in the tape management system at a data center in that some
parameters are set to bypass or ignore tape header records. Which of the following is the MOST effective
compensating control for this weakness?

• A.Staging and job set up
• B.Supervisory review of logs
• C.Regular back-up of tapes
• D.Offsite storage of tapes

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the PRIMARY benefit of using an integrated audit approach?

• A.Higher acceptance of the findings from the audited business areas
• B.The avoidance of duplicated work and redundant recommendations
• C.Enhanced allocation of resources and reduced audit costs
• D.A holistic perspective of overall risk and a better understanding of controls

Comment: *

Name: *

Email: *

Verification: *

When reviewing the configuration of network devices, an IS auditor should FIRST identify:

• A.the best practices for the type of network devices deployed.
• B.whether components of the network are missing.
• C.the importance of the network device in the topology.
• D.whether subcomponents of the network are being used appropriately.

Comment: *

Name: *

Email: *

Verification: *

An IS auditor is reviewing security controls related to collaboration tools for a business unit responsible for intellectual property and patents. Which of the following observations should be of MOST concern to the auditor?

• A.Logging and monitoring for content filtering is not enabled.
• B.Training was not provided to the department that handles intellectual property and patents
• C.Employees can share files with users outside the company through collaboration tools.
• D.The collaboration tool is hosted and can only be accessed via an Internet browser.

Comment: *

Name: *

Email: *

Verification: *