An IS auditor evaluating a three-tier client/server architecture observes an issue with graphical user interface (GUI) tasks. Which layer should the auditor recommend the client address?

• A.Presentation layer
• B.Application layer
• C.Storage layer
• D.Transport layer

Comment: *

Name: *

Email: *

Verification: *

Which of the following statement correctly describes difference between packet filtering firewall and stateful inspection firewall?

• A.Packet filtering firewall do not maintain client session whereas Stateful firewall maintains client session.
• B.Packet filtering firewall and Stateful firewall both maintain session of client.
• C.Packet filtering firewall is a second generation firewall whereas Stateful is a first generation of firewall.
• D.Packet filtering firewall and Stateful firewall do not maintain any session of client.

Comment: *

Name: *

Email: *

Verification: *

An IS auditor is evaluating management's risk assessment of information systems. The IS auditor should FIRST review:

• A.the controls already in place.
• B.the effectiveness of the controls in place.
• C.the mechanism for monitoring the risks related to the assets.
• D.the threats/vulnerabilities affecting the assets.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the dominating objective of BCP and DRP?

• A.To protect human life
• B.To mitigate the risk and impact of a business interruption
• C.To eliminate the risk and impact of a business interruption
• D.To transfer the risk and impact of a business interruption

Comment: *

Name: *

Email: *

Verification: *

When should reviewing an audit client's business plan be performed relative to reviewing an organization's IT strategic plan?

• A.Reviewing an audit client's business plan should be performed before reviewing an organization's IT strategic plan.
• B.Reviewing an audit client's business plan should be performed after reviewing an organization's IT strategic plan.
• C.Reviewing an audit client's business plan should be performed during the review of an organization's IT strategic plan.
• D.Reviewing an audit client's business plan should be performed without regard to an organization's IT strategic plan.

Comment: *

Name: *

Email: *

Verification: *