Which of the following findings should be of GREATEST concern to an IS auditor reviewing an organization s newly implemented online security awareness program'?

• A.Employees do not receive immediate notification of results
• B.Only new employees are required to attend the program
• C.Metrics have not been established to assess training results
• D.The timing for program updates has not been determined

Comment: *

Name: *

Email: *

Verification: *

A checksum is classified as which type of control?

• A.Preventive control
• B.Administrative control
• C.Detective control
• D.Corrective control

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be the FIRST consideration when deciding whether data should be moved to a cloud provider for storage?

• A.Service level agreements (SLAs)
• B.Vendor cloud certification
• C.Data storage costs
• D.Data classification

Comment: *

Name: *

Email: *

Verification: *

An IS auditor is evaluating the progress of a web-based customer service application development project. Which of the following would be MOST helpful for this evaluation?

• A.Change management logs
• B.Developer status reports
• C.Critical path analysis reports
• D.Backlog consumption reports

Comment: *

Name: *

Email: *

Verification: *

Which of the following are used in a firewall to protect the entity's internal resources?

• A.Failover services
• B.Remote access servers
• C.Secure Sockets Layers (SSLs)
• D.Internet Protocol (IP) address restrictions

Comment: *

Name: *

Email: *

Verification: *