Which of the following would be of MOST concern to an IS auditor reviewing a virtual private network (VPN) implementation? Computers on the network that are located:

• A.on the enterprise's internal network.
• B.at the backup site.
• C.in employees' homes.
• D.at the enterprise's remote offices.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would BEST help in classifying an organization s data?

• A.Data retention requirements
• B.Analysis of existing data handling procedures
• C.Industry best practices for data classification
• D.Impact of data loss or disclosure

Comment: *

Name: *

Email: *

Verification: *

.Authentication techniques for sending and receiving data between EDI systems is crucial to prevent which of the following? Choose the BEST answer.

• A.Unsynchronized transactions
• B.Unauthorized transactions
• C.Inaccurate transactions
• D.Incomplete transactions

Comment: *

Name: *

Email: *

Verification: *

The potential for unauthorized system access by way of terminals or workstations within an organization's facility is increased when:

• A.connecting points are available in the facility to connect laptops to the network.
• B.users take precautions to keep their passwords confidential.
• C.terminals with password protection are located in insecure locations.
• D.terminals are located within the facility in small clusters under the supervision of an administrator.

Comment: *

Name: *

Email: *

Verification: *

During an IS audit of a data center, it was found that programmers are allowed to make emergency fixes to
operational programs. Which of the following should be the IS auditor's PRIMARY recommendation?

• A.Bypass use ID procedures should be put in place to ensure that the changes are subject to after-the-
  event approval and testing
• B.The ability to undertake emergency fixes should be restricted to selected key personnel
• C.Programmers should be allowed to implement emergency fixes only after obtaining verbal agreement
  from the application owner
• D.Emergency program changes should be subject to program migration and testing procedures before
  they are applied to operational systems

Comment: *

Name: *

Email: *

Verification: *