What is the MOST important consideration of any disaster response plan?

• A.Personnel safety
• B.Adequate resource capacity
• C.IT asset protection
• D.Business resumption

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST restricts users to those functions needed to perform their duties?

• A.Application level access control
• B.Data encryption
• C.Disabling floppy disk drives
• D.Network monitoring device

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be an IS auditor's GREATEST concern when reviewing an organization's security controls for policy compliance?

• A.End users are not required to acknowledge security policy training.
• B.Security policy documents are available on a public domain website.
• C.The security policy has no! been reviewed within the past year
• D.Security policies are not uniformly applicable across the organization

Comment: *

Name: *

Email: *

Verification: *

Management considered two projections for its business continuity plan; plan A with two months to recover and plan B with eight months to recover. The recovery objectives are the same in both plans. It is reasonable to expect that plan B projected higher:

• A.downtime costs.
• B.resumption costs.
• C.recovery costs.
• D.walkthrough costs.

Comment: *

Name: *

Email: *

Verification: *

An IT governance framework provides an organization with:

• A.a basis for directing and controlling IT.
• B.assurance that there will be IT cost reductions.
• C.organizational structures to enlarge the market share through IT.
• D.assurance that there are surplus IT investments.

Comment: *

Name: *

Email: *

Verification: *