Which of the following is the PRIMARY purpose for conducting parallel testing?

• A.To determine if the system is cost-effective
• B.To enable comprehensive unit and system testing
• C.To highlight errors in the program interfaces with files
• D.To ensure the new system meets user requirements

Comment: *

Name: *

Email: *

Verification: *

A legacy application is running on an operating system that is no longer supported by the vendor. If the organization continues to use the current application, which of the following should be the IS auditor's GREATEST concern?

• A.Potential exploitation of zero-day vulnerabilities in the system
• B.Inability to update the legacy application database
• C.Increased cost of maintaining the system
• D.Inability to use the operating system due to potential license issues

Comment: *

Name: *

Email: *

Verification: *

An IS auditor finds that periodic reviews of read-only users for a reporting system are not being performed.
Which of the following should be the IS auditor's NEXT course of action?

• A.Obtain a verbal confirmation from IT for this exemption.
• B.Review the list of end-users and evaluate for authorization.
• C.Verify management's approval for this exemption.
• D.Report this control process weakness to senior management.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should an IS auditor expect to find when reviewing IT security policy?

• A.Virus protection Implementation strategies
• B.Assigned responsibility for safeguarding company assets
• C.An inventory of information assets
• D.A risk-based classification of systems

Comment: *

Name: *

Email: *

Verification: *

The BEST way to prevent fraudulent payments is to implement segregation of duties between payment processing and:

• A.requisition creation.
• B.vendor setup.
• C.payment approval.
• D.check creation.

Comment: *

Name: *

Email: *

Verification: *