An IS auditor notes that a number of application plug-ins currently in use are no longer supported. Which of the following is the auditor's BEST recommendation to management?

• A.Implement role-based access controls.
• B.Conduct a vulnerability assessment to determine exposure.
• C.Review content backup and archiving procedures.
• D.Review on-boarding and off-boarding processes.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is an oft-cited cause of vulnerability of networks?

• A.software monoculture
• B.software diversification
• C.single line of defense
• D.multiple DMZ
• E.None of the choices.

Comment: *

Name: *

Email: *

Verification: *

In an IS auditor's review of an organization's configuration management practices for software, which of the following is MOST important?

• A.Service level agreements (SLAs) between the IT function and users
• B.Post-implementation review reports from development efforts
• C.Organizational policies related to release management
• D.Software rental contracts or lease agreements

Comment: *

Name: *

Email: *

Verification: *

A checksum following is MOST important for an IS auditor to review when evaluating the accuracy of a spreadsheet that contains several macros?

• A.Detective control
• B.Administrative control
• C.Corrective control
• D.Preventive control

Comment: *

Name: *

Email: *

Verification: *

While reviewing similar issues in an organization s help desk system, an IS auditor finds that they were analyzed independently and resolved differently This situation MOST likely indicates a deficiency in:

• A.configuration management
• B.problem management
• C.IT service level management
• D.change management

Comment: *

Name: *

Email: *

Verification: *