Off-site data backup and storage should be geographically separated so as to _______________ (fill in the blank) the risk of a widespread physical disaster such as a hurricane or earthquake.

• A.Accept
• B.Eliminate
• C.Transfer
• D.Mitigate

Comment: *

Name: *

Email: *

Verification: *

During an audit of a mortgage processing application, an IS auditor identifies that the application allows all users to export large quantities of sensitive customer data. Which of the following is the BEST control for the auditor to recommend to mitigate this risk?

• A.Restrict download capability to authorized users.
• B.Require strong passwords for application login.
• C.Periodically recertify user access.
• D.Mask sensitive data within the application.

Comment: *

Name: *

Email: *

Verification: *

An organization can ensure that the recipients of e-mails from its employees can authenticate the identity of the sender by:

• A.digitally signing all e-mail messages.
• B.encrypting all e-mail messages.
• C.compressing all e-mail messages.
• D.password protecting all e-mail messages.

Comment: *

Name: *

Email: *

Verification: *

Which of the following findings is the GREATES concern when reviewing a disaster recovery plan (DRP) with high availability requirements?

• A.Current vendor contact information is not included.
• B.Disaster recovery testing is not required.
• C.Recovery time objectives (RTO) are not defined.
• D.Responsibilities are not defined for the recovery team.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be the PRIMARY audience for a third-party technical security assessment report?

• A.Operational IT management
• B.External regulators
• C.Board of directors
• D.Legal counsel

Comment: *

Name: *

Email: *

Verification: *