The PRIMARY objective of testing a business continuity plan is to:

• A.familiarize employees with the business continuity plan.
• B.ensure that all residual risks are addressed.
• C.exercise all possible disaster scenarios.
• D.identify limitations of the business continuity plan.

Comment: *

Name: *

Email: *

Verification: *

To restore service at a large processing facility after a disaster, which of the following tasks should be
performed FIRST?

• A.Launch the emergency action team.
• B.Inform insurance company agents.
• C.Contact equipment vendors.
• D.Activate the reciprocal agreement.

Comment: *

Name: *

Email: *

Verification: *

A company converted its payroll system from an external service to an internal package. Payroll processing
in April was run in parallel. To validate the completeness of data after the conversion, which of the following
comparisons from the old to the new system would be MOST effective?

• A.Turnaround time for payroll processing
• B.Employee counts and year-to-date payroll totals
• C.Master file employee data to payroll journals
• D.Cut-off dates and overwrites for a sample of employees

Comment: *

Name: *

Email: *

Verification: *

Why is the WAP gateway a component warranting critical concern and review for the IS auditor when auditing and testing controls enforcing message confidentiality?

• A.WAP is often configured by default settings and is thus insecure.
• B.WAP provides weak encryption for wireless traffic.
• C.WAP functions as a protocol-conversion gateway for wireless TLS to Internet SSL.
• D.WAP often interfaces critical IT systems.

Comment: *

Name: *

Email: *

Verification: *

Which of the following applications has the MOST inherent risk and should be prioritized during audit planning?

• A.A decommissioned legacy application
• B.An onsite application that is unsupported
• C.An outsourced accounting application
• D.An internally developed application

Comment: *

Name: *

Email: *

Verification: *