Which of the following provides an audit framework?

• A.Payment Card Industry-Data Security Standard (PCI-DSS)
• B.International Organization Standard (ISO) 27002
• C.National Institute of Standards and Technology (NIST) SP 800-30
• D.Control Objectives for IT (COBIT)

Comment: *

Name: *

Email: *

Verification: *

The general ledger setup function in an enterprise resource package allows for setting accounting periods. Access to this function has been permitted to users in finance, the shipping department, and production scheduling. What is the most likely reason for such broad access?

• A.The requirement to post entries for a closed accounting period.
• B.The need to create and modify the chart of accounts and its allocations.
• C.The lack of policies and procedures for the proper segregation of duties.
• D.The need to change accounting periods on a regular basis.

Comment: *

Name: *

Email: *

Verification: *

What is the FIRST step in developing the vulnerability management program?

• A.Maintain and Monitor
• B.Define Policy
• C.Baseline the Environment
• D.Organization Vulnerability

Comment: *

Name: *

Email: *

Verification: *

Which of the following reports should you as an IT auditor use to check on compliance with a service level agreement's requirement for uptime?

• A.Systems logs
• B.Utilization reports
• C.Hardware error reports
• D.Availability reports

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a weakness of an asset or group of assets that can be exploited by one or more threats?

• A.Attack vector
• B.Threat
• C.Vulnerability
• D.Exploitation

Comment: *

Name: *

Email: *

Verification: *