An IS auditor finds multiple situations where the help desk resolved security incidents without notifying IT
security as required by policy. Which of the following is the BEST audit recommendation?

• A.Display the incident response hotline in common areas.
• B.Have IT security review problem management policy.
• C.Reinforce the incident escalation process.
• D.Redesign the help desk reporting process.

Comment: *

Name: *

Email: *

Verification: *

The GREATEST advantage of using web services for the exchange of information between two systems is:

• A.secure communications.
• B.improved performance.
• C.efficient interfacing.
• D.enhanced documentation.

Comment: *

Name: *

Email: *

Verification: *

A data center has a badge-entry system. Which of the following is MOST important to protect the
computing assets in the center?

• A.Badge readers are installed in locations where tampering would be noticed
• B.The computer that controls the badge system is backed up frequently
• C.A process for promptly deactivating lost or stolen badges exists
• D.All badge entry attempts are logged

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST describes the role of a directory server in a public key infrastructure (PKI)?

• A.Encrypts the information transmitted over the network
• B.Makes other users' certificates available to applications
• C.Facilitates the implementation of a password policy
• D.Stores certificate revocation lists (CRLs)

Comment: *

Name: *

Email: *

Verification: *

An IS auditor reviewing digital rights management (DRM) applications should expect to find an extensive
use for which of the following technologies?

• A.Digitalized signatures
• B.Hashing
• C.Parsing
• D.Steganography

Comment: *

Name: *

Email: *

Verification: *