An IS auditor has been asked to advise on the design and implementation of IT management best practices Which of the following actions would impair the auditor's independence?

• A.Designing an embedded audit module
• B.Providing consulting advice for managing applications
• C.Implementing risk response on management's behalf
• D.Evaluating the risk management process

Comment: *

Name: *

Email: *

Verification: *

An organization is considering replacing physical backup tapes stored offsite with real-time on-line backup
to a storage area network (SAN) located in the primary data center. Which of the following is the
GREATEST risk?

• A.Archived data may not satisfy data retention requirements
• B.A single disaster could cause significant data loss
• C.Backups may require excessive storage space
• D.Implementation could cause significant cost increases

Comment: *

Name: *

Email: *

Verification: *

An organization needs to comply with data privacy regulations forbidding the display of personally identifiable information (Pll) on customer bills or receipts However it is a business requirement to display at least one attribute so that customers can verify the bills or receipts are intended for them What is the BEST recommendation?

• A.Data encryption
• B.Data tokenization
• C.Data masking
• D.Data sanitization

Comment: *

Name: *

Email: *

Verification: *

Above almost all other concerns, what often results in the greatest negative impact on the implementation of new application software?

• A.Failing to perform user acceptance testing
• B.Lack of user training for the new system
• C.Lack of software documentation and run manuals
• D.Insufficient unit, module, and systems testing

Comment: *

Name: *

Email: *

Verification: *

During the audit of a database server, which of the following would be considered the GREATEST exposure?

• A.The password does not expire on the administrator account
• B.Default global security settings for the database remain unchanged
• C.Old data have not been purged
• D.Database activity is not fully logged

Comment: *

Name: *

Email: *

Verification: *