Which of the following management decisions presents the GREATEST risk associated with data leakage?

• A.Security policies have not been updated in the past year
• B.Security awareness training is not provided to staff.
• C.Staff are allowed to work remotely.
• D.There is no requirement for desktops to be encrypted.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important to include in security awareness training?

• A.How to respond to various types of suspicious activity
• B.The importance of complex passwords
• C.Descriptions of the organization's security infrastructure
• D.Contact information for the organization's security team

Comment: *

Name: *

Email: *

Verification: *

When is it MOST important for an IS auditor to apply the concept of materiality in an audit?

• A.When evaluating representations from the auditee
• B.When gathering information for the fieldwork
• C.When a violation of a regulatory requirement has been identified
• D.When planning an audit engagement

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST source of information tor an IS auditor to use when determining whether an organization's information security policy is adequate?

• A.Industry benchmarks
• B.Penetration test results
• C.Risk assessment results
• D.Information security program plans

Comment: *

Name: *

Email: *

Verification: *

Which of the following analytical methods would be MOST useful when trying to identify groups with similar behavior or characteristics in a large population?

• A.Random sampling
• B.Deviation detection
• C.Classification
• D.Cluster sampling

Comment: *

Name: *

Email: *

Verification: *