Which of the following should be an IS auditor's PRIMARY focus when developing a risk-based IS audit program?

• A.Portfolio management
• B.Business plans
• C.Business processes
• D.IT strategic plans

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST describes the necessary documentation for an enterprise product
reengineering (EPR) software installation?

• A.Specific developments only
• B.Business requirements only
• C.All phases of the installation must be documented
• D.No need to develop a customer specific documentation

Comment: *

Name: *

Email: *

Verification: *

Which of the following weaknesses would have the GREATEST impact on the effective operation of a perimeter firewall?

• A.Ad-hoc monitoring of firewall activity
• B.Potential back doors to the firewall software
• C.Misconfiguration on the firewall rules
• D.Use of stateful firewalls with default configuration

Comment: *

Name: *

Email: *

Verification: *

An IS auditor performing an application maintenance audit would review the log of program changes for the:

• A.authorization of program changes.
• B.creation date of a current object module.
• C.number of program changes actually made.
• D.creation date of a current source program.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a corrective control that reduces the impact of a threat event?

• A.Security policy
• B.Business continuity plan (BCP)
• C.Segregation of duties (SoD)
• D.Business process analysis

Comment: *

Name: *

Email: *

Verification: *