To determine if unauthorized changes have been made to production code the BEST audit procedure is to:

• A.examine the change control system records and trace them forward to object code files.
• B.review access control permissions operating within the production program libraries.
• C.examine object code to find instances of changes and trace them back to change control records.
• D.review change approved designations established within the change control system.

Comment: *

Name: *

Email: *

Verification: *

Which of the following ISO/OSI layers performs transformations on data to provide a standardized
application interface and to provide common communication services such as encryption?

• A.Application layer
• B.Session layer
• C.Presentation layer
• D.Transport layer

Comment: *

Name: *

Email: *

Verification: *

Which of the following findings should be of GREATEST concern to an IS auditor performing a review of IT operations?

• A.Changes to the job scheduler application's parameters are not approved and reviewed by an operations supervisor.
• B.Access to the job scheduler application has not been restricted to a maximum of two staff members.
• C.Operations shift turnover logs are not utilized to coordinate and control the processing environment.
• D.The job scheduler application has not been designed to display pop-up error messages.

Comment: *

Name: *

Email: *

Verification: *

What is an edit check to determine whether a field contains valid data?

• A.Completeness check
• B.Accuracy check
• C.Redundancy check
• D.Reasonableness check

Comment: *

Name: *

Email: *

Verification: *

The purpose of a checksum on an amount field in an electronic data interchange (EDI) communication of financial transactions is to ensure:

• A.nonrepudiation.
• B.integrity.
• C.authenticity.
• D.authorization.

Comment: *

Name: *

Email: *

Verification: *