Which of the following would be the BEST process for continuous auditing to a large financial Institution?

• A.Validating performance of help desk metrics
• B.Validating access controls for real-time data systems
• C.Testing encryption standards on the disaster recovery system
• D.Performing parallel testing between systems

Comment: *

Name: *

Email: *

Verification: *

Which of the following provides the BEST evidence that a third-party service provider's information security controls are effective?

• A.An audit report of the controls by the service provider's external auditor
• B.Documentation of the service provider's security configuration controls
• C.An interview with the service provider's information security officer
• D.A review of the service provider's policies and procedures

Comment: *

Name: *

Email: *

Verification: *

During which phase of the software development life cycle is it BEST to initiate the discussion of application controls?

• A.Business case development phase when stakeholders are identified
• B.Application design phase process functionalities are finalized
• C.User acceptance testing (UAT) phase when test scenarios are designed
• D.Application coding phase when algorithms are developed to solve business problems

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important for an IS auditor to validate when auditing network device management?

• A.Devices cannot be accessed through service accounts.
• B.Backup policies include device configuration files.
• C.All devices have current security patches assessed.
• D.All devices are located within a protected network segment.

Comment: *

Name: *

Email: *

Verification: *

Controls related to authorized modifications to production programs are BEST tested by:

• A.reviewing only the actual lines of source code changed in the program.
• B.tracing modifications from the executable program back to the original request for change.
• C.testing only the authorizations to implement the new program.
• D.tracing modifications from the original request for change forward to the executable program.

Comment: *

Name: *

Email: *

Verification: *