Which of the following would be the MOST useful metric for management to consider when reviewing a project portfolio?

• A.Cost of projects divided by total IT cost
• B.Expected return divided by total project cost
• C.Net present value (NPV) of the portfolio
• D.Total cost of each project

Comment: *

Name: *

Email: *

Verification: *

An IS auditor is conducting a review of a data center. Which of the following observations could indicate an access control Issue?

• A.Antistatic mats deployed at the computer room entrance
• B.Fencing around facility is two meters high
• C.Security cameras deployed outside main entrance
• D.Muddy footprints directly inside the emergency exit

Comment: *

Name: *

Email: *

Verification: *

In the development of a new financial application, the IS auditor's FIRST involvement should be in the:

• A.control design.
• B.application design.
• C.feasibility study.
• D.system test.

Comment: *

Name: *

Email: *

Verification: *

An IS auditor performs a follow-up audit and learns the approach taken by the auditee to fix the findings differs from the agreed-upon approach confirmed during the last audit. Which of the following should be the auditor's NEXT course of action?

• A.Report results of the follow-up to the audit committee.
• B.Evaluate the appropriateness of the remedial action taken.
• C.Inform senior management of the change in approach.
• D.Conduct a risk analysis incorporating the change.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST metric to measure the alignment of IT and business strategy?

• A.Level of stakeholder satisfaction with the scope of planned IT projects
• B.Percentage of enterprise risk assessments that include IT-related risk
• C.Frequency of business process capability maturity assessments
• D.Percentage of stat satisfied with their IT-related roles

Comment: *

Name: *

Email: *

Verification: *