A national tax administration agency with a distributed network experiences service disruptions due to a large influx of traffic to a regional office near the end of each year. Which of the following would BEST enable the agency to improve the performance of its servers during the busy period?

• A.Virtual firewall
• B.Proxy server
• C.Load balancer
• D.Virtual private network (VPN)

Comment: *

Name: *

Email: *

Verification: *

During the course of fieldwork, an internal IS auditor observes a critical vulnerability within a newly deployed application. What is the auditor's BEST course of action?

• A.Notify IT management.
• B.Document the finding in the report.
• C.Identify other potential vulnerabilities.
• D.Report the finding to the external auditors.

Comment: *

Name: *

Email: *

Verification: *

To address an organization's disaster recovery requirements, backup intervals should not exceed the:

• A.service level objective (SLO).
• B.recovery time objective (RTO).
• C.recovery point objective (RPO).
• D.maximum acceptable outage (MAO).

Comment: *

Name: *

Email: *

Verification: *

An organization is developing a web portal using some external components. Which of the following should be of MOST concern to an IS auditor?

• A.Staff require additional training in order to perform cede review.
• B.The organization has not reviewed the components for known exploits.
• C.Open-source components were integrated during development.
• D.Some of the developers are located in another country.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to prevent social engineering incidents?

• A.Maintain an onboarding and annual security awareness program.
• B.Ensure user workstations are running the most recent version of antivirus software.
• C.Include security responsibilities in job descriptions and require signed acknowledgment.
• D.Enforce strict email security gateway controls

Comment: *

Name: *

Email: *

Verification: *