An IS auditor finds that capacity management for a key system is being performed by IT with no input from the business The auditor's PRIMARY concern would be:

• A.failure to maximize the use of equipment
• B.impact to future business project funding.
• C.cost of excessive data center storage capacity
• D.unanticipated increase in business s capacity needs.

Comment: *

Name: *

Email: *

Verification: *

An IS auditor discovers that an IT organization serving several business units assigns equal priority to all initiatives, creating a risk of delays in securing project funding Which of the following would be MOST helpful in matching demand for projects and services with available resources in a way that supports business objectives?

• A.Portfolio management
• B.IT governance framework
• C.Risk assessment results
• D.Project management

Comment: *

Name: *

Email: *

Verification: *

An IS auditor identifies that a legacy application to be decommissioned in three months cannot meet the security requirements established by the current policy. What is the BEST way (or the auditor to address this issue?

• A.Recommend the application be patched to meet requirements.
• B.Take no action since the application will be decommissioned in three months.
• C.Verify management has approved a policy exception to accept the risk.
• D.Inform the IT director of the policy noncompliance.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to mitigate the impact of ransomware attacks?

• A.Paying the ransom
• B.Backing up data frequently
• C.Requiring password changes for administrative accounts
• D.Invoking the disaster recovery plan (DRP)

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be an IS auditor's GREATEST concern when a data owner assigns an incorrect classification level to data?

• A.Controls to adequately safeguard the data may not be applied.
• B.Data may not be encrypted by the system administrator.
• C.Competitors may be able to view the data.
• D.Control costs may exceed the intrinsic value of the IT asset.

Comment: *

Name: *

Email: *

Verification: *