Physical access controls are usually implemented based on which of the following means (Choose two.):

• A.mechanical locks
• B.guards
• C.operating systems
• D.transaction applications
• E.None of the choices.

Comment: *

Name: *

Email: *

Verification: *

Which of the following will replace system binaries and/or hook into the function calls of the operating
system to hide the presence of other programs (choose the most precise answer)?

• A.rootkits
• B.virus
• C.trojan
• D.tripwire
• E.None of the choices.

Comment: *

Name: *

Email: *

Verification: *

During an audit of a multinational bank's disposal process, an IS auditor notes several findings. Which of the following should be the auditor's GREATEST concern?

• A.Backup media are not reviewed before disposal.
• B.Degaussing is used instead of physical shredding.
• C.Backup media are disposed before the end of the retention period
• D.Hardware is not destroyed by a certified vendor.

Comment: *

Name: *

Email: *

Verification: *

The use of symmetric key encryption controls to protect sensitive data transmitted over a communications network requires that.

• A.encryption keys at one end be changed on a regular basis
• B.public keys be stored in encrypted form.
• C.encryption keys be changed only when a compromise is detected at both ends
• D.primary keys for encrypting the data be stored in encrypted form

Comment: *

Name: *

Email: *

Verification: *

A contract for outsourcing IS functions should always include:

• A.Full details of security procedures to be observed by the contractor.
• B.A provision for an independent audit of the contractor's operations.
• C.The names and roles of staff to be employed in the operation.
• D.Data transfer protocols.

Comment: *

Name: *

Email: *

Verification: *