During a database management evaluation an IS auditor discovers that some accounts with database administrator (DBA) privileges have been assigned a default password with an unlimited number of failed login attempts Which of the following is the auditor's BEST course of action?

• A.Document the finding and explain the risk of having administrator accounts with inappropriate security settings
• B.Identify accounts that have had excessive failed login attempts and request they be disabled
• C.Request the IT manager to change administrator security parameters and update the finding

Comment: *

Name: *

Email: *

Verification: *

When reviewing a project to replace multiple manual data entry systems with an artificial intelligence (Al) system, the IS auditor should be MOST concerned with the impact Al will have on

• A.enterprise architecture (EA)
• B.task capacity output
• C.future task updates
• D.employee retention

Comment: *

Name: *

Email: *

Verification: *

Which of the following methods BEST enforces data leakage prevention in a multi-tenant cloud environment?

• A.Tenants are required to implement data classification polices
• B.A comprehensive security review is performed every quarter.
• C.Data for different tenants is segregated by database schema
• D.Monitoring tools are configured to alert in case of downtime

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to determine whether a test of a disaster recovery plan (DRP) was successful?

• A.Analyze whether predetermined test objectives were met.
• B.Perform testing at the backup data center.
• C.Evaluate participation by key personnel.
• D.Test offsite backup files.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would BEST determine whether a post-implementation review (PIR) performed by the project management office (PMO) was effective?

• A.Project outcomes have been realized.
• B.Management approved the PIR report.
• C.Lessons learned were implemented.
• D.The review was performed by an external provider.

Comment: *

Name: *

Email: *

Verification: *