A critical function of a firewall is to act as a:

• A.special router that connects the Internet to a LAN.
• B.device for preventing authorized users from accessing the LAN.
• C.server used to connect authorized users to private trusted network resources.
• D.proxy server to increase the speed of access to authorized users.

Comment: *

Name: *

Email: *

Verification: *

A review of Internet security disclosed that users have individual user accounts with Internet service providers (ISPs) and use these accounts for downloading business data. The organization wants to ensure that only the corporate network is used. The organization should FIRST:

• A.keep a manual log of Internet access.
• B.use a proxy server to filter out Internet sites that should not be accessed.
• C.monitor remote access activities.
• D.include a statement in its security policy about Internet use.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a rewrite of ipfwadm?

• A.ipchains
• B.iptables
• C.Netfilter
• D.ipcook
• E.None of the choices.

Comment: *

Name: *

Email: *

Verification: *

Which of the following access control situations represents the MOST serious control weakness?

• A.System developers have access to production data
• B.End users have access to program development tools.
• C.Computer operators have access to system level flowcharts
• D.Programmers have access to development hardware

Comment: *

Name: *

Email: *

Verification: *

A software development project has had a significant scope reduction. Which of the following is the MOST important action for the IS auditor to perform in this situation?

• A.Verifying that IT costs have been reduced
• B.Determining if managed maturity levels have been employed
• C.Informing IT and management about the scope reduction
• D.Evaluating the effects on key controls

Comment: *

Name: *

Email: *

Verification: *