An IS audit team is evaluating the documentation related to the most recent application user-access review
performed by IT and business management. It is determined the user list was not system-generated.
Which of the following should be the GREATEST concern?

• A.Source of the user list reviewed
• B.Availability of the user list reviewed
• C.Confidentiality of the user list reviewed
• D.Completeness of the user list reviewed

Comment: *

Name: *

Email: *

Verification: *

When reviewing user access to an application containing sensitive company data, which of the following should be the GREATEST concern with regard to segregation of duties?

• A.The help desk performs application backups.
• B.The application programmer performs quality assurance functions.
• C.The network administrator performs security administrator functions.
• D.The database administrator performs system analyst functions

Comment: *

Name: *

Email: *

Verification: *

Which of the following will identify a deviation in the information security management process from generally accepted standards of good practices?

• A.Gap analysis
• B.Risk assessment
• C.Business impact analysis (BIA)
• D.Penetration testing

Comment: *

Name: *

Email: *

Verification: *

Which of me following is MOST important to ensure that electronic evidence corrected during a forensic investigation will be admissible m future legal proceedings?

• A.Engaging an independent third party to perform the forensic investigation
• B.Performing investigative procedures on the original hard drives rather than images of the hard drives
• C.Restricting evidence access to professionally certified forensic investigators
• D.Documenting evidence handling by personnel throughout the forensic investigation

Comment: *

Name: *

Email: *

Verification: *

During the requirements definition phase of a software development project, the aspects of software testing
that should be addressed are developing:

• A.test data covering critical applications.
• B.detailed test plans.
• C.quality assurance test specifications.
• D.user acceptance testing specifications

Comment: *

Name: *

Email: *

Verification: *