Which of the following Is the BEST way to ensure payment transaction data is restricted to the appropriate users?

• A.Using a single menu tor sensitive application transactions
• B.implementing role-based access at the application level
• C.Restricting access to transactions using network security software
• D.Implementing two-factor authentication

Comment: *

Name: *

Email: *

Verification: *

An IS auditor plans to review all access attempts to a video-monitored and proximity card-controlled communications room. Which of the following would be MOST useful to the auditor?

• A.Manual sign-in and sign-out log
• B.System electronic log
• C.Alarm system with CCTV
• D.Security incident log

Comment: *

Name: *

Email: *

Verification: *

A finance department has a multi-year project to upgrade the enterprise resource planning (ERP) system hosting the general ledger. and in year one, the system version upgrade will be applied. Which of the following should be the PRIMARY focus of the IS auditor reviewing the first year of the project?

• A.unit testing
• B.Network performance
• C.User acceptance testing (UAT)
• D.Regression testing

Comment: *

Name: *

Email: *

Verification: *

Which of the following occurs during the issues management process for a system development project?

• A.Contingency planning
• B.Configuration management
• C.Impact assessment
• D.Help desk management

Comment: *

Name: *

Email: *

Verification: *

Which of the following would protect the confidentiality of information sent in email messages?

• A.Secure Hash Algorithm 1(SHA-1)
• B.Digital signatures
• C.Encryption
• D.Digital certificates

Comment: *

Name: *

Email: *

Verification: *