A third-party consultant is managing the replacement of an accounting system. Which of the following should be the IS auditor's GREATEST concern?

• A.The user department will manage access rights.
• B.Testing was performed by the third-party consultant
• C.The replacement is occurring near year-end reporting
• D.Data migration is not part of the contracted activities.

Comment: *

Name: *

Email: *

Verification: *

In an IT organization where many responsibilities are shared which of the following is the BEST control for detecting unauthorized data changes'?

• A.Data changes are logged in an outside application
• B.Segregation of duties conflicts are periodically reviewed
• C.Data changes are independently reviewed by another group
• D.Users are required to periodically rotate responsibilities

Comment: *

Name: *

Email: *

Verification: *

Due to limited storage capacity, an organization has decided to reduce the actual retention period for media containing completed low-value transactions. Which of the following is MOST important for the organization to ensure?

• A.The policy includes a strong risk-based approach.
• B.The retention period allows for review during the year-end audit.
• C.The total transaction amount has no impact on financial reporting.
• D.The retention period complies with data owner responsibilities.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST minimizes performance degradation of servers used to authenticate users of an e-commerce website?

• A.Configure each authentication server and ensure that the disks of each server form part of a duplex.
• B.Configure each authentication server and ensure that each disk of its RAID is attached to the primary controller.
• C.Configure a single server as a primary authentication server and a second server as a secondary authentication server.
• D.Configure each authentication server as belonging to a cluster of authentication servers.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST enables alignment of IT with business objectives?

• A.Benchmarking against peer organizations
• B.Completing an IT risk assessment
• C.Leveraging an IT governance framework
• D.Developing key performance indicators (KPIs)

Comment: *

Name: *

Email: *

Verification: *