An IS auditor is reviewing the perimeter security design of a network. Which of the following provides the GREATEST assurance outgoing Internet traffic is controlled?

• A.Intrusion detection system (IDS)
• B.Security information and event management (SIEM) system
• C.Stateful firewall
• D.Load balancer

Comment: *

Name: *

Email: *

Verification: *

An IS auditor should look for which of the following to ensure the risk associated with scope creep has been mitigated during software development?

• A.Source code version control
• B.Project change management controls
• C.Existence of an architecture review board
• D.Configuration management

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST effective control over visitor access to a data center?

• A.Visitors are escorted.
• B.Visitor badges are required.
• C.Visitors sign in.
• D.Visitors are spot-checked by operators.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is an example of a preventive control for physical access?

• A.Keeping log entries for all visitors to the building
• B.Implementing a fingerprint-based access control system for the building
• C.Installing closed-circuit television (CCTV) cameras for all ingress and egress points
• D.Implementing a centralized logging server to record instances of staff logging into workstations

Comment: *

Name: *

Email: *

Verification: *

In an IS audit of several critical servers, the IS auditor wants to analyze audit trails to discover potential anomalies in user or system behavior. Which of the following tools are MOST suitable for performing that task?

• A.CASE tools
• B.Embedded data collection tools
• C.Heuristic scanning tools
• D.Trend/variance detection tools

Comment: *

Name: *

Email: *

Verification: *