Physical access controls are usually implemented based on which of the following means (Choose two.):

• A.mechanical locks
• B.guards
• C.operating systems
• D.transaction applications
• E.None of the choices.

Comment: *

Name: *

Email: *

Verification: *

An IS auditor conducting a follow-up audit learns that previously funded recommendations have not been implemented due to recent budget restrictions. Which of the following should the

• A.Start an audit of the project funding allocation process
• B.Report to the audit committee that the recommendations are still open
• C.Report the matter to the chief financial officer (CFO) and recommend funding be reinstated
• D.Close the audit recommendations in the tracking register

Comment: *

Name: *

Email: *

Verification: *

Which of the following should an IS auditor review to understand project progress in terms of time, budget and deliverables for early detection of possible overruns and for projecting estimates at completion (EACs)?

• A.Function point analysis
• B.Earned value analysis
• C.Cost budget
• D.Program Evaluation and Review Technique

Comment: *

Name: *

Email: *

Verification: *

An IS auditor inspected a windowless room containing phone switching and networking equipment and documentation binders. The room was equipped with two handheld fire extinguishers-one filled with CO2, the other filled with halon. Which ofthe following should be given the HIGHEST priority in the auditor's report?

• A.The halon extinguisher should be removed because halon has a negative impact on the atmospheric ozone layer.
• B.Both fire suppression systems present a risk of suffocation when used in a closed room.
• C.The CO2 extinguisher should be removed, because CO2 is ineffective for suppressing fires involving solid combustibles (paper).
• D.The documentation binders should be removed from the equipment room to reduce potential risks.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST critical when creating data for testing the logic in a new or modified application system?

• A.A sufficient quantity of data for each test case
• B.Data representing conditions that are expected in actual processing
• C.Completing the test on schedule
• D.A random sample of actual data

Comment: *

Name: *

Email: *

Verification: *