When an organization introduces virtualization into its architecture, which of the following should be an IS auditor's PRIMARY area of focus to verify adequate protection?

• A.Host operating system configuration
• B.Shared storage space
• C.Maintenance cycles
• D.Multiple versions of the same operating system

Comment: *

Name: *

Email: *

Verification: *

An IS auditor is reviewing a small organization's business continuity and disaster recovery plans Which of the following findings would pose the GREATEST concern?

• A.Data backup and storage is not performed every day
• B.The organization's hardware is near end-of-the
• C.Practice drills related to the plans are conducted infrequently
• D.The plans are not periodically reviewed and updated

Comment: *

Name: *

Email: *

Verification: *

While conducting an audit of a service provider, an IS auditor observes that the service provider has outsourced a part of the work to another provider. Since the work involves confidential information, the IS auditor's PRIMARY concern shouldbe that the:

• A.requirement for protecting confidentiality of information could be compromised.
• B.contract may be terminated because prior permission from the outsourcer was not obtained.
• C.other service provider to whom work has been outsourced is not subject to audit.
• D.outsourcer will approach the other service provider directly for further work.

Comment: *

Name: *

Email: *

Verification: *

Which of the following types of data validation editing checks is used to determine if a field contains data,
and not zeros or blanks?

• A.Check digit
• B.Existence check
• C.Completeness check
• D.Reasonableness check

Comment: *

Name: *

Email: *

Verification: *

Which of the following would provide the BEST protection against the hacking of a computer connected to the Internet?

• A.A remote access server
• B.A proxy server
• C.A personal firewall
• D.A password-generating token

Comment: *

Name: *

Email: *

Verification: *