Which of the following is a preventive control related to change management?

• A.Audit of implemented changes for the period under review
• B.Log review of managed changes
• C.Debugging of implemented changes
• D.Implementation of managed change approval processes

Comment: *

Name: *

Email: *

Verification: *

While auditing an IT department's cloud service provider, the IS auditor found that privileged access monitoring is not being performed as required by the contract. The provider disagrees with this issue and notes that compensating controls are in place. The IS auditor's NEXT course of action should be to:

• A.test compensating controls as part of the audit.
• B.define a remediation plan.
• C.review privileged access logs.
• D.recommend revising the service level agreement (SLA).

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the PRIMARY responsibility of an information owner?

• A.Implementing access control policies
• B.Designing the information classification scheme
• C.Implementing periodic data backups
• D.Assigning classification levels to information assets

Comment: *

Name: *

Email: *

Verification: *

What is BEST for an IS auditor lo review when assessing the effectiveness of changes recently made to processes and tools related to an organization's business continuity plan (BCP)?

• A.Updated inventory of systems
• B.Full test results
• C.Completed test plans
• D.Change management processes

Comment: *

Name: *

Email: *

Verification: *

An airlines online booking system uses an automated script that checks whether fares are within the defined threshold of what is reasonable before the fares are displayed on the website. Which type of control is in place?

• A.Corrective control
• B.Preventer control
• C.Compensating control
• D.Detective control

Comment: *

Name: *

Email: *

Verification: *