Which of the following audit procedures would be MOST conclusive in evaluating the effectiveness of an e-commerce application system's edit routine?

• A.Review of source code
• B.Interviews with knowledgeable users
• C.Review of program documentation
• D.Use of test transactions

Comment: *

Name: *

Email: *

Verification: *

Why is it not preferable for a firewall to treat each network frame or packet in isolation?

• A.Such a firewall has no way of knowing if any given packet is part of an existing connection, is trying to
  establish a new connection, or is just a rogue packet.
• B.Such a firewall is costly to setup.
• C.Such a firewall is too complicated to maintain.
• D.Such a firewall is CPU hungry.
• E.Such a firewall offers poor compatibility.
• F.None of the choices.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would BEST protect against web-based cross-domain attacks?

• A.Network addressing scheme
• B.Database hardening
• C.Encryption controls
• D.Application controls

Comment: *

Name: *

Email: *

Verification: *

IS audit is asked to explain how local area network (LAN) servers can contribute to a rapid dissemination of viruses. The IS auditor's BEST response is that:

• A.users of a given server have similar usage of applications and files.
• B.the server's operating system exchanges data with each station starting at every logon.
• C.the server's software is the prime target and is the first to be infected
• D.the server's file sharing function facilitates the distribution of files and applications

Comment: *

Name: *

Email: *

Verification: *

Depending on the complexity of an organization's business continuity plan (BCP), the plan may be developed as a set of more than one plan to address various aspects of business continuity and disaster recovery, in such an environment, it is essential that:

• A.each plan is consistent with one another.
• B.all plans are integrated into a single plan.
• C.each plan is dependent on one another.
• D.the sequence for implementation of all plans is defined.

Comment: *

Name: *

Email: *

Verification: *