What is the BEST control to address SQL injection vulnerabilities?

• A.Input validation
• B.Unicode translation
• C.Secure Sockets Layer (SSL) encryption
• D.Digital signatures

Comment: *

Name: *

Email: *

Verification: *

An IS auditor discovers from patch logs that some in-scope systems are not compliant with the regular patching schedule. What should the auditor do NEXT?

• A.Review the organization's patch management policy.
• B.Request a plan of action to be established as a follow-up item.
• C.Interview IT management to clarify the current procedure.
• D.Report this finding to senior management.

Comment: *

Name: *

Email: *

Verification: *

An IS auditor is reviewing the maturity of a large organizations IT governance. Which of the following BEST demonstrates that IT governance has been effectively implemented?

• A.The board reviews strategic IT hey performance Indicators (KPIs).
• B.The board approves necessary resources for IT security reviews.
• C.The board reviews compliance with legal and regulatory requirements
• D.The board monitors adherence to the organizations information security policy.

Comment: *

Name: *

Email: *

Verification: *

A new system development project is running late against a critical implementation deadline. Which of the following is the MOST important activity?

• A.Document last-minute enhancements.
• B.Perform user acceptance testing (UAT).
• C.Ensure that code has been reviewed.
• D.Perform a pre-implementation audit.

Comment: *

Name: *

Email: *

Verification: *

________ (fill in the blank) is/are ultimately accountable for the functionality, reliability, and security within IT governance.

• A.Data custodians
• B.The board of directors and executive officers
• C.IT security administration
• D.Business unit managers

Comment: *

Name: *

Email: *

Verification: *