An IS auditor has completed a review of an outsourcing agreement and has communicating the issues at a meeting with senior management?

• A.Present an overview highlighting the key findings.
• B.Provide a plan of action and milestones.
• C.Present a completed report and discuss the details.
• D.Provide a detailed report in advance and open the floor to questions.

Comment: *

Name: *

Email: *

Verification: *

Passwords should be:

• A.assigned by the security administrator for first time logon.
• B.changed every 30 days at the discretion of the user.
• C.reused often to ensure the user does not forget the password.
• D.displayed on the screen so that the user can ensure that it has been entered properly.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be of GREATEST concern when reviewing an organization's security information and event management (SIEM) solution?

• A.SIEM configuration is reviewed annually
• B.SIEM reporting is customized.
• C.The SIEM is decentralized.
• D.SIEM reporting is ad hoc.

Comment: *

Name: *

Email: *

Verification: *

Since data storage of a critical business application is on a redundant array of inexpensive disks (RAID). Backup are not considered essential. The IS auditor should recommend proper backup because RAID:

• A.Cannot recover from a natural disaster
• B.Disks cannot be hot-swapped for quick recovery
• C.Cannot offer protection against disk corruption
• D.Relies on proper maintenance

Comment: *

Name: *

Email: *

Verification: *

During a change control audit of a production system, an IS auditor finds that the change management process is not formally documented and that some migration procedures failed. What should the IS auditor do next?

• A.Recommend redesigning the change management process.
• B.Gain more assurance on the findings through root cause analysis.
• C.Recommend that program migration be stopped until the change process is documented.
• D.Document the finding and present it to management.

Comment: *

Name: *

Email: *

Verification: *