The FIRST step in establishing a firewall security policy is to determine the:

• A.necessary logical access rights.
• B.expected data throughput.
• C.business requirements.
• D.existing firewall configuration.

Comment: *

Name: *

Email: *

Verification: *

An IS auditor wants to determine who has oversight of staff performing a specific task and is referencing the organization's RACI chart. Which of the following roles within the chart would provide this information?

• A.Accountable
• B.Responsible
• C.Informed
• D.Consulted

Comment: *

Name: *

Email: *

Verification: *

As part of a post-implementation review, the BEST way to assess the realization of outcomes is by:

• A.evaluating the actual performance of the system.
• B.comparing the business case benefits to the achieved benefits.
• C.performing a comprehensive risk analysis.
• D.obtaining feedback from the user community.

Comment: *

Name: *

Email: *

Verification: *

Which of the following are BEST suited for continuous auditing?

• A.Manual transactions
• B.Irregular transactions
• C.Low-value transactions
• D.Real-time transactions

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be of GREATEST concern to an IS auditor when evaluating a new system's production readiness?

• A.Projected benefits have not been realized.
• B.A system defect was found during user acceptance testing.
• C.Functional requirements have not been met.
• D.Functional design documentation is not complete.

Comment: *

Name: *

Email: *

Verification: *