Reconfiguring which of the following firewall types will prevent inward downloading of files through the File Transfer Protocol (FTP)?

• A.Circuit gateway
• B.Application gateway
• C.Packet filter
• D.Screening router

Comment: *

Name: *

Email: *

Verification: *

Which of the following metrics would be MOST useful to an IS auditor when assessing the resilience of an application programming interface (API)?

• A.Number of defects logged during development compared to other APIs
• B.Number of API calls expected versus actually received within a time interval
• C.Number of patches released within a time interval for the API
• D.Number of developers adopting the API for their applications

Comment: *

Name: *

Email: *

Verification: *

An IS auditor has found that a vendor has gone out of business and the escrow has an older version of the source code What is the auditor's BEST recommendation for the organization?

• A.Continue using the existing application since it meets the current requirements.
• B.Undertake an analysis to determine the business risk.
• C.Bring the escrow version up to date
• D.Prepare a maintenance plan that will support the application using the existing code.

Comment: *

Name: *

Email: *

Verification: *

To address the risk of operations staff's failure to perform the daily backup, management requires that the systems administrator sign off on the daily backup. This is an example of risk:

• A.avoidance.
• B.transference.
• C.mitigation.
• D.acceptance.

Comment: *

Name: *

Email: *

Verification: *

An organization's security policy mandates that all new employees must receive appropriate security awareness training. Which of the following metrics would BEST assure compliance with this policy?

• A.Percentage of new hires that have completed the training.
• B.Number of new hires who have violated enterprise security policies.
• C.Number of reported incidents by new hires.
• D.Percentage of new hires who report incidents

Comment: *

Name: *

Email: *

Verification: *