Which of the following is MOST important for an IS auditor to consider when performing the risk assessment poor to an audit engagement?

• A.The amount of time since the previous audit
• B.Industry standards and best practices
• C.The results of the previous audit
• D.The design of controls

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be done FIRST when planning a penetration test?

• A.Execute nondisclosure agreements (NDAs).
• B.Determine reporting requirements for vulnerabilities
• C.Define the testing scope.
• D.Obtain management consent for the testing

Comment: *

Name: *

Email: *

Verification: *

Neural networks are effective in detecting fraud because they can:

• A.discover new trends since they are inherently linear.
• B.solve problems where large and general sets of training data are not obtainable.
• C.attack problems that require consideration of a large number of input variables.
• D.make assumptions about the shape of any curve relating variables to the output.

Comment: *

Name: *

Email: *

Verification: *

Allowing application programmers to directly patch or change code in production programs increases risk of fraud. True or false?

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Which of the following would an IS auditor use to determine if unauthorized modifications were made to production programs?

• A.System log analysis
• B.Compliance testing
• C.Forensic analysis
• D.Analytical review

Comment: *

Name: *

Email: *

Verification: *