What process is used to validate a subject's identity?

• A.Identification
• B.Nonrepudiation
• C.Authorization
• D.Authentication

Comment: *

Name: *

Email: *

Verification: *

"Which of the following BEST describes the concept of ""defense in depth""?"

• A.more than one subsystem needs to be compromised to compromise the security of the system and the information it holds.
• B.multiple firewalls are implemented.
• C.multiple firewalls and multiple network OS are implemented.
• D.intrusion detection and firewall filtering are required.
• E.None of the choices.

Comment: *

Name: *

Email: *

Verification: *

During a disaster recovery audit, an IS auditor finds that a business impact analysis (BIA) has not been performed. The auditor should FIRST

• A.conduct additional compliance testing.
• B.issue an intermediate report to management.
• C.perform a business impact analysis (BIA).
• D.evaluate the impact on current disaster recovery capability.

Comment: *

Name: *

Email: *

Verification: *

An auditor is creating an audit program in which the objective is to establish the adequacy of personal data privacy controls in a payroll process. Which of the following would be MOST important to include?

• A.Approval of data changes
• B.Audit logging of administrative user activity
• C.Segregation of duties controls
• D.User access provisioning

Comment: *

Name: *

Email: *

Verification: *

If a database is restored from information backed up before the last system image, which of the following is
recommended?

• A.The system should be restarted after the last transaction.
• B.The system should be restarted before the last transaction.
• C.The system should be restarted at the first transaction.
• D.The system should be restarted on the last transaction.

Comment: *

Name: *

Email: *

Verification: *