Which of the following is MOST important for an IS auditor to review when determining whether IT investments are providing value to tie business?

• A.Return on investment (ROI)
• B.Business strategy
• C.Business cases
• D.Total cost of ownership (TCO)

Comment: *

Name: *

Email: *

Verification: *

For a discretionary access control to be effective, it must:

• A.operate within the context of mandatory access controls.
• B.operate independently of mandatory access controls.
• C.enable users to override mandatory access controls when necessary.
• D.be specifically permitted by the security policy.

Comment: *

Name: *

Email: *

Verification: *

Which of the following business continuity activities prioritizes the recovery of critical functions?

• A.Business Impact analysts (BlA)
• B.Business continuity plan (BCP) testing
• C.Disaster recovery plan (DRP) testing
• D.Risk assessment

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important for an IS auditor to review when evaluating the effectiveness of an organization's incident response process?

• A.Past incident response actions
• B.Incident response staff experience and qualifications
• C.Results from management testing of incident response procedures
• D.Incident response roles and responsibilities

Comment: *

Name: *

Email: *

Verification: *

What should be an IS auditor's PRIMARY focus when reviewing a patch management procedure in an environment where availability is a top priority?

• A.Validity certification prior to deployment
• B.Technical skills of the deployment team
• C.Deployment automation to all servers
• D.Comprehensive testing prior to deployment

Comment: *

Name: *

Email: *

Verification: *