Which of the following is MOST important to ensure that electronic evidence collected during a forensic investigation will be admissible in future legal proceeding?

• A.Documentation evidence handling by personnel throughout the forensic investigation
• B.Restricting evidence access to professionally certified forensic investigation
• C.Performing investigate procedures on the original hard drives rather than images of the hard drives
• D.Engaging an independent third party to perform the forensic investigation

Comment: *

Name: *

Email: *

Verification: *

IT control objectives are useful to IS auditors, as they provide the basis for understanding the:

• A.desired result or purpose of implementing specific control procedures.
• B.best IT security control practices relevant to a specific entity.
• C.techniques for securing information.
• D.security policy.

Comment: *

Name: *

Email: *

Verification: *

Which of the following activities should an IS auditor perform FIRST during an external network security assessment?

• A.Exploitation
• B.Vulnerability scanning
• C.Reconnaissance
• D.Enumeration

Comment: *

Name: *

Email: *

Verification: *

What can be used to gather evidence of network attacks?

• A.Access control lists (ACL)
• B.Intrusion-detection systems (IDS)
• C.Syslog reporting
• D.Antivirus programs

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important to consider when scheduling follow-up audits?

• A.The efforts required for independent verification with new auditors
• B.The impact if corrective actions are not taken
• C.The amount of time the auditee has agreed to spend with auditors
• D.Controls and detection risks related to the observations

Comment: *

Name: *

Email: *

Verification: *