The internal audit activity completed an initial risk analysis of the organization's data storage center and found several areas of concern. Which of the following is the most appropriate next step?

• A.Risk response.
• B.Risk identification.
• C.Risk assessment.
• D.Identification of context.

Comment: *

Name: *

Email: *

Verification: *

The most direct way to prepare a cash budget for a manufacturing entity is to include:

• A.Projected sales, credit terms, and net income.
• B.Projected net income, depreciation, and goodwill amortization.
• C.Projected purchases, percentages of purchases paid, and net income.
• D.Projected sales and purchases, percentages of collections, and terms of payments.

Comment: *

Name: *

Email: *

Verification: *

A control for ensuring that the source code and the executable code for a program match is:

• A.Verifying that the program move request is authorized.
• B.Requiring program, system, and parallel testing of the code.
• C.Authorizing programmer access to test libraries only.
• D.Recompiling source code into the production load library.

Comment: *

Name: *

Email: *

Verification: *

With regard to disaster recovery planning, which of the following would most likely involve stakeholders from several departments?

• A.Determining the frequency with which backups will be performed.
• B.Assigning who in the IT department would be involved in the recovery procedures.
• C.Prioritizing the order in which business systems would be restored.
• D.Assessing the resources needed to meet the data recovery objectives

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements is most accurate concerning the management and audit of a web server?

• A.The number of ports and protocols allowed to access the web server should be maximized.
• B.The file transfer protocol (FTP) should always be enabled.
• C.The simple mail transfer protocol (SMTP) should be operating under the most privileged accounts.
• D.Secure protocols for confidential pages should be used instead of clear-text protocols such as HTTP or FTP.

Comment: *

Name: *

Email: *

Verification: *